This guide explains how to link a domain name to the offer kSuite Infomaniak.

Manage the kSuite domain

To get started:

1. Click here to access the management of your kSuite on the Infomaniak Manager (need help?).
2. If a domain is already linked, you can manage it by clicking on the action menu ⋮ to the right of the kSuite name, then Manage domains:
   
3. If no domain is linked yet, you can add 1 by clicking on the button:
   
4. Click the button to add a domain:
   
5. Choose the domain to attach from those in your Organization (still available, i.e., not attached to any service) or enter an external domain name:
   
   • Depending on the situation of your domain (also refer to the information below), you will need to perform some manipulations beforehand…
     
   • … or even purchase a domain if necessary:
     

If the domain name is…

… with Infomaniak, same Organization

If your domain name is registered with Infomaniak and is in the same user account or Organization as the email, then there is nothing to do.

Simply add it to your kSuite:

The domain will be added and visible on the dashboard:

• Refer to this other guide to verify and correct any potential configuration errors.

… with Infomaniak, same Organization and already linked to a Mail Service or kDrive

No problem, you can convert your existing products to kSuite.

… with Infomaniak, different Organization

If your domain name is registered with Infomaniak but in a different user account or Organization, then:

• Edit its DNS zone by specifying Infomaniak's MX (+ SPF & DKIM).
  • Any DNS addition/modification can take up to 48 hours to propagate.

OR

• Move it within the same Organization.

Generally, a message will alert you to this situation:

… and the technical information to be reported where the domain is located will be proposed:

... with Infomaniak using external DNS

If your domain name includes DNS that are not Infomaniak's, then:

• Edit the current DNS zone where it is located (if necessary, consult the help of the relevant provider) by specifying Infomaniak's MX (+ SPF & DKIM).
  • Any DNS addition/modification can take up to 48 hours to propagate.

OR

• Change the current DNS and select the use of Infomaniak DNS.
  • Any DNS addition/modification can take up to 48 hours to propagate.
• Refer to this other guide to verify and correct any potential configuration errors.

This will be indicated to you (see the images above).

... elsewhere with external DNS

If your domain name is registered with another registrar and includes DNS that are not Infomaniak's, then:

• Edit the current DNS zone where it is located (if necessary, refer to the help of the relevant provider) by specifying Infomaniak's MX (+ SPF & DKIM).
  • Any DNS addition/modification can take up to 48 hours to propagate.

OR

• Change the current DNS (if necessary, refer to the help of the relevant provider) by specifying Infomaniak's (this implies having a DNS zone with Infomaniak.
  • Any DNS addition/modification can take up to 48 hours to propagate.
• This DNS zone with Infomaniak will be configured correctly, but refer to this other guide to verify and correct any configuration errors.

This will be indicated to you (see the images above).

... elsewhere but you are bringing it back

If your domain name is registered with another registrar and you wish to bring it to the same place as your Infomaniak email, then:

• Transfer the domain name to Infomaniak (it will be configured correctly, but refer to this other guide to verify and correct any configuration errors).

Otherwise, consider ordering a new domain name if necessary.

This guide explains the difference between the terms synonym and alias in the context of the Domain Name service offered by Infomaniak.

Synonym domain / alias domain

So-called synonym domain names (i.e., domains that are entirely dependent on the main domain, without their own DNS configuration) and alias (independent domains, with their own DNS configuration) can both serve as secondary domains associated with a main domain.

For example, the domains pomme.xyz (alias) and banane.xyz (synonym) can redirect to a common main domain such as fruits.xyz.

Here is the technical distinction to remember:

• The synonym (also called "linked domain" or "DNS mirror") directly uses the DNS servers of the main domain. It has no DNS zone of its own.
• The alias (also called "redirected independent domain" or "DNS alias") has its own DNS records (independent DNS zone), although it points to the same hosting or services.

Learn more

• How to add a domain as a synonym
• How to dissociate a synonym domain
• Understanding the difference between domains and DNS zones

This guide explains how to add an ANAME record in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• The ANAME record type allows you to point the root of a domain to another address, similar to a CNAME record but without having to specify a source xyz preceding the domain (xyz.domain.com for example).
• It is therefore not a real DNS record as such and it is not listed in the list of records that can be selected when editing the DNS zone.
• However, since it is a kind of alias, see below the method to follow to set up an ANAME.

Create an ANAME

Creating an ANAME is equivalent to creating a CNAME directly at the root of the domain, and this is not possible.

If you are sure of what you are doing, you can follow this method to create the equivalent of an ANAME:

1. Create a web redirection from the Manager of the domain root (root) to the www.
2. Add a CNAME entry working with www to the target of your choice.

This guide is for you if you encounter the error The web host does not exist when visiting the address of a site on an Infomaniak Web Hosting.

Preamble

• This type of error usually occurs because your domain name is not correctly linked to your site (your domain name is probably pointing to the wrong IP address or is misconfigured).
  • Example: a domain abc.xyz that is misconfigured and would point to an IPv4 Starter hosting and to a shared hosting in IPv6…

Resolve a Domain - Website Linking Issue

To get your site back online:

• Check the DNS zone of your domain name, especially its A records.
• Correct them if necessary by entering the IP address of your hosting.
  • Any DNS addition/modification can take up to 48 hours to propagate.

To do this, the easiest way is to use the Infomaniak DNS Diagnostic Tool to automatically correct the pointing, by previously grouping the products in the same Organization if necessary.

This guide explains how to add or modify one or more SRV type records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• This type of record allows you to indicate which services are available for a domain.
• They are often used for XMPP, LDAP protocols or to configure Microsoft Office 365.

Modify the DNS zone

To manage this type of record in a DNS zone:

1. Click here to access the management of your domain on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the domain in question.
3. Click on DNS zone in the left sidebar.
4. Click the button to add a record:
   
5. Click on the radio button SRV to add a record.
6. Click on the Next button:
   
7. Enter the values of the SRV required for your DNS zone (the ._tcp.domain… is already entered).
8. Leave the default value for the TTL.
9. Click on the Save button:
   

Check the correct addition of the complete SRV in the records table:

This guide is intended for users who wish to manage Glue records (or "glue records") at Infomaniak.

Preamble

• Glue records are crucial for linking a domain name to its associated name servers, by providing the IP addresses of these servers directly.
  • For example, for the domain domain.xyz, the glue records specify the name servers (ns1.domain.xyz and ns2.domain.xyz) as well as their IP addresses (192.0.2.10 and 192.0.2.11).
• This speeds up DNS resolution, allowing browsers and online services to find your site faster and more efficiently.
• Warning: adding an NS does not automatically add it to the DNS zone: it is necessary to manually update the DNS zone of your domain!

Create Glue records...

... via "A record"

This method involves creating an A record (address) for ns1.domain.xyz pointing to the IP of the NS. This will have the effect of registering the IP with the registry. You will then be able to add ns1.domain.xyz which will be recognized and redirected to the correct NS.

domain.xyz. 3600 IN NS ns1.domain.xyz.
domain.xyz. 3600 IN NS ns2.domain.xyz.

ns1.domain.xyz. 3600 IN A 192.0.2.10
ns2.domain.xyz. 3600 IN A 192.0.2.11

... via "Glue records" button

This way of doing things allows you to create, but also modify, existing Glue records:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product concerned.
3. Click on DNS Servers in the left sidebar.
4. Click on the Manage glue records button:
   
5. Click on the Add a server button:
   
6. Enter the name of the server to be added as well as its IP address.
7. Click on the Validate button.

This guide explains how to add or modify a DKIM record in a DNS zone (domain/subdomain) managed on the Infomaniak Manager.

Preamble

• The DKIM (Domain Keys Identified Mail) protocol authenticates your emails with a unique digital signature.
• It ensures that your messages have not been modified during transit and certifies the sender's identity, thus preventing spoofing by spammers.
• DKIM is enabled by default for all Mail Services whose DNS zone is managed at Infomaniak.
• All your emails are automatically signed, whether they are sent from the Infomaniak Mail app or the email software/client of your choice.

Check the DKIM record

If you have a Mail Service with Infomaniak, the simplest way is to go to the Global Security tool to easily verify and correct certain problematic records.

And when your domain name is managed elsewhere, you will find the DKIM record to add in the DNS zone:

Manually modify the DNS zone (not recommended)

To manage this type of record in a DNS zone:

1. Click here to access the management of your domain on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the domain in question.
3. Click on DNS Zone in the left sidebar.
4. Click the button to add a record:
   
5. Click the radio button DKIM to add a record.
6. Click the Next button:
   
7. Enter the DKIM values required for your DNS zone.
8. Leave the default value for TTL.
9. Click the Save button:
   

Add multiple DKIM

You can have multiple DKIM records on your domain/subdomain without limit, unlike DMARC or SPF, as long as your DNS host allows it.

If you use multiple third-party email providers, for example the ERP Odoo, it is necessary to add a DKIM for Odoo in addition to Infomaniak's.

Use unique DKIM selectors to avoid conflicts with existing records.

This guide explains how to add or modify one or more A and AAAA type records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• This type of record allows a domain name to point to a static IP address (usually a server), type A for an IPv4 and AAAA for IPv6.
• This is the method generally used to redirect your domain name to the IP address of the web server on which your website is hosted. Moreover, this type of pointing is used automatically to link your domain name with your website if they are in the same place and in the same Infomaniak Organization.
• You should only modify this type of record if you have a particular configuration to set up (e.g., pointing a subdomain to an external application).

Modify the DNS zone

To manage this type of record in a DNS zone:

1. Click here to access the management of your domain on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the domain in question.
3. Click on DNS Zone in the left sidebar.
4. Click the button to add a record:
   
5. Click the A or AAAA radio button to add a record.
6. Click the Next button:
   
7. Enter the values necessary for your DNS zone.
8. Leave the default value for the TTL.
9. If necessary, you can request the adjustment of the AAAA record by checking the box, which will allow you to indicate an IPv6 at the same time.
10. Click the Save button:
    

This guide details the different statuses that a domain name can have.

Common statuses

"Active" or "OK"

The domain name is declared in the DNS, the domain name is active and unlocked. All administrative and/or technical operations are possible.

"Registrar-Lock / Registry-Lock" or "clientTransferProhibited"

The domain name is declared in the DNS. The domain name is active and locked to protect it, especially against unauthorized transfer requests.

Statuses that require an operation or observation

"Registrar-Hold / Registry-Hold"

This status is set when the domain has expired (not renewed). The only possible operation is then renewal. Administrative and/or technical operations are not possible.

"RedemptionPeriod"

This status occurs if the domain has not been renewed. Refer to this other guide if you are looking for information on this subject.

"PendingRestore"

This status appears during a restoration request. The registrar has 7 days to communicate all necessary information to the registry for its restoration.

"PendingDelete"

This status follows the status RedemptionPeriod after 30 days if no restoration request has been made. The name will be deleted during a 15-day period before becoming public.

In the case of a .fr domain extension

"Active" (Active)

The domain name is declared in the DNS (fully operational).

"Frozen" (Frozen)

The domain name is declared in the DNS but no administrative and/or technical operation is possible. Possible causes: see article 6.1 of the charter of the AFNIC.

"Locked"

The domain name is no longer declared in the DNS; it is no longer functional and no administrative and/or technical operation is possible. Possible causes: see article 6.2 of the AFNIC charter.

This guide explains how to add or modify an MX record in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• The “MX” record type allows you to specify which provider should manage the messaging (= the target).
• You should only modify this type of record if you have a specific configuration to implement (for example, domain name with Infomaniak and messaging service with an external provider).
• There can be multiple MX records (so that a second messaging service can take over in case the first one fails) and in this case a number designates the priority of each of them (the smaller the number, the higher the priority).

MX for Infomaniak messaging

Infomaniak automatically provides the MX record needed to link your domain name and your messaging, if both are managed within the same organization at the Manager level.

If your configuration requires you to add an MX record yourself to direct mail traffic to Infomaniak, then specify the following MX record:

mta-gw.infomaniak.ch

with the priority 5.

A correct SPF record is also required for the proper functioning of Infomaniak messaging.

Variant specific to certain operators

On the interface of some providers like Gandi, it is necessary to add a point at the end of the MX record: mta-gw.infomaniak.ch.

Modify the DNS zone

To manage this type of record in a DNS zone:

1. Click here to access the management of your domain on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the domain concerned.
3. Click on DNS zone in the left sidebar.
4. Click the button to add a record:
   
5. Click on the radio button MX to add a record.
6. Click on the Next button:
   
7. Enter the MX values required for your DNS zone.
8. Leave the default value for the TTL.
9. Click the Save button:
   

Once added, it is visible in the DNS zone record table:

Learn more

• Link a domain to an Infomaniak Mail Service
• Specify the Infomaniak MX with a third-party web provider

This guide explains which DKIM to add to secure Infomaniak messaging if it revolves around a domain name whose DNS is that of Cloudflare.

Preamble

• If you manage your emails at Infomaniak, as well as the associated domain name, but the DNS management is with Cloudflare, then you need to add the DKIM on the Cloudflare interface.

Add a DKIM on Cloudflare

Prerequisites

• Refer to this other guide to allow you to display the DKIM corresponding to your Infomaniak messaging.
• Display the DKIM to be able to copy-paste it. Example:
  

Follow the procedure below to correctly activate DKIM, thus improving the security and deliverability of emails for the domain in question:

1. Click here to access your Cloudflare account.
2. Select the domain in question.
3. In the DNS section, search for and delete any NS records for "_domainkey" pointing to Infomaniak.
4. Click on the Add a record (Add record) button to open the input form.
5. Fill in the fields using the data obtained from the Infomaniak Manager, respecting the standard configuration for a TXT type DKIM record:

Make sure the Proxy Status (cloud) is set to DNS Only (grayed out) for email authentication records.

This guide explains how to add or modify one or more CNAME and DNAME type records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• The CNAME record type allows a subdomain to point to a website address.
  • This is the method generally used to make the www subdomain work with your site, or to redirect a subdomain to a folder on the web server where your website is hosted.
• The DNAME record type for "delegation name" is particularly useful when reorganizing domains or for smooth transitions of part of your infrastructure to another, while preserving the hierarchical structure of subdomains.
  • A DNAME creates an alias for an entire domain and all its subdomains.
• Unlike the CNAME which only applies to a single specific host name, the DNAME automatically redirects all subdomains. Example:
  • A DNAME for abc.site1.com pointing to site2.com will automatically link xyz.abc.site1.com to xyz.site2.com, new.login.abc.site1.com to new.login.site2.com, and so on.
• ⚠ A DNAME record cannot be used at the root zone level of a domain (like site1.com directly). It is generally used on a subdomain. If you want to redirect the main domain itself, you will need to use other types of records such as an A, AAAA or CNAME (with some restrictions for the latter).

Modify the DNS zone

To manage this type of record in a DNS zone:

1. Click here to access the management of your domain on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the domain in question.
3. Click on DNS zone in the left sidebar.
4. Click the button to add a record:
   
5. Click the radio button corresponding to add a record.
6. Click the Next button:
   
7. Enter the values necessary for your DNS zone.
8. Leave the default value for TTL.
9. Click the Save button:
   

This guide explains how to add or modify one or more CAA records in the DNS zone (of a domain name) managed on the Manager Infomaniak.

Preamble

• A CAA record allows you to specify a certification authority authorized to issue certificates for a domain.

Add a CAA

To manage this type of record in a DNS zone:

1. Click here to access the management of your domain on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the domain concerned.
3. Click on DNS Zone in the left sidebar.
4. Click the button to add a record:
   
5. Click on the radio button CAA to add a record.
6. Click on the Next button:
   
7. Enter the CAA values required for your DNS zone: if you are validating an SSL certificate, refer to the information below.
8. Save your information by clicking on the button at the bottom of the page.

Adding CAA to validate an SSL certificate...

... Sectigo

In the case of an SSL certificate validation Sectigo, follow the generic guide but specifically enter the following data:

• Choose “Issue for certification authority”.
• Enter the flag: 0.
• Specify sectigo.com.

... Let's Encrypt

In the case of a Let's Encrypt SSL certificate validation, follow the generic guide but specifically enter the following data:

• Choose “Issue for certification authority”.
• Enter the flag: 0.
• Specify letsencrypt.org.

This guide explains what DNSSEC is and how this protection enhances the security of Domains at Infomaniak and the traffic they generate.

Preamble

• Each URL corresponds to an IP address, and when an internet user enters the URL of your site in their web browser, they call on a DNS server whose role is to redirect them to the IP address that corresponds to the entered domain (technically, this is known as DNS resolution).
• When DNSSEC is not activated on your domain name, a malicious person could detect a flaw in a DNS server and modify the correspondence between your domain name and the IP address of your site with an IP address of their choice. In such a case, the internet user who enters the URL of your site would then be redirected to another website that does not correspond to the content of your website.
• DNSSEC allows securing the authenticity of the response provided by the DNS server and thus guarantees to internet users that they are viewing the website they actually want to see. If a hacker attempted to modify the IP address of your domain name in a DNS server protected by DNSSEC at the time of resolution, the latter would refuse their requests, as they would not be authenticated.
• DNSSEC is therefore an additional security measure to the SSL certificate of a site, by guaranteeing to the internet user that they are going to the site that corresponds to the entered URL, and the SSL certificate then intervenes to encrypt the exchanges between the internet user's web browser and the web server of the site they are visiting.

Activate or deactivate DNSSEC

To know the availability of DNSSEC for a specific domain, refer to the specifics of the extensions that concern you from this page (under Frequently Asked Questions by first clicking on the extension concerned).

If necessary, DNSSEC is activated in a few clicks on domain names fully managed at Infomaniak:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product concerned.
3. Activate or deactivate DNSSEC from the Dashboard of the domain:
   

Check if DNSSEC is activated

Enter the domain name to be checked on this analysis site.

Specific guide

• Configure DNSSEC with the Cloudflare CDN

This guide explains how to add or modify one or more SPF records in a DNS zone (of a domain name) managed on the Infomaniak Manager.

Preamble

• If your domain name is registered with Infomaniak, your email is managed by Infomaniak, but your website is hosted with another provider (e.g., Wix), you are probably managing the DNS zone (and therefore the SPF) with this other provider: refer to this other guide on this topic.

Understanding SPF records

The SPF (Sender Policy Framework) record type is a standard for verifying the domain name of the sender of an email and aims to reduce SPAM. It is used to indicate which server is authorized or not to send emails for a domain. If the SPF fails for an email, it means that the email was not sent from a server/IP address authorized by the administrator of the sending domain. The email is then considered as spam.

Strict SPF -all: rejection of unauthorized emails

Infomaniak automatically installs this type of record when creating a Mail Service on your domain (strict SPF):

v=spf1 include:spf.infomaniak.ch -all

Thus, the recipient server of the email you send will evaluate that any email not coming from Infomaniak servers will be rejected. This prevents malicious individuals from impersonating email addresses from your domain.

Flexible SPF ?all: tolerance for certain emails

You can decide to modify the SPF for a more flexible model:

v=spf1 include:spf.infomaniak.ch ?all

In this case, the recipient server of the email you send will evaluate, according to its own rules, whether it accepts emails not coming from Infomaniak servers.

In summary:

• ?: the receiving server accepts the message even if the sender is not listed in the SPF
• ~: the receiving server generally accepts the message if it is not listed in the SPF but identifies it as suspicious
• -: the receiving server rejects the message if it is not listed in the SPF (recommended)

Adding an SPF via a TXT record

There are 2 ways to manage SPFs.

If you have a Mail Service with Infomaniak, the simplest way is to go to the Global Security tool to manage SPFs:

However, since the SPF record is a TXT type DNS record, you can also manage it from the DNS zone of the domain name:

1. Click here to access the management of your domain on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the domain in question.
3. Click on DNS Zone in the left sidebar menu.
4. Check in the table that there is not already a TXT record with a value mentioning SPF as here:
   
5. Click the button to add a record (you will get an error if you try to add a TXT record with an SPF value when one already exists in the zone):
   
6. Click the radio button TXT to add a record.
7. Click the button Next:
   
8. Enter the SPF value required for your DNS zone.
9. Leave the default value for TTL.
10. Click the button Save:
    

Add multiple SPFs

If you use other mail providers in addition to Infomaniak, you need to obtain their SPF and then merge it with Infomaniak's according to a specific syntax.

Example of 3 SPFs to merge:

• That of Infomaniak: v=spf1 include:spf.infomaniak.ch -all
• Those of 2 secondary providers:
  • v=spf1 include:the-second-domain.xyz ?all
  • v=spf1 include:the-other-domain.xyz ~all

...the final SPF to be inserted into your DNS zone should be in the form:

v=spf1 include:spf.infomaniak.ch include:the-second-domain.xyz include:the-other-domain.xyz -all

Delete any other SPF entry from the DNS zone of your domain! Any DNS addition/modification can take up to 48 hours to propagate.

Limits on the number of SPFs

Multiple SPFs are limited to a maximum of 10 inclusions.

The Infomaniak SPF usually already includes 4 inclusions:

• include:relay.mail.infomaniak.ch
• include:app.mail.infomaniak.ch
• include:newsletter.infomaniak.com
• include:amazonses.com

Check the SPF record(s)

The Global Security tool on the Infomaniak Manager allows you to easily check and correct any problematic records you may have.

If you encounter any issues, it is recommended to analyze your domain name on MxToolbox to check if your SPF contains syntax errors, too many inclusions, or any other issues that could lead to an error:

… or directly at the address https://mxtoolbox.com/spf.aspx.

This guide explains how to set up DNSSEC with Cloudflare for a domain registered with Infomaniak.

Prerequisites

• The DNS zone of the domain must be managed by Cloudflare.

Configure DNSSEC with Cloudflare

To do this:

1. Click here to access the Cloudflare console.
2. Go to the DNS tab.
3. Click on Enable DNSSEC.
4. Keep the following information handy:
   
   (see points 8 & 10 below)
   1. The details under a will go under HASH
   2. The details under b will go under HASH TYPE
   3. The details under c will go under ALGORITHM
   4. The details under d will go under KEY
5. Click here to access the management of your domain on the Infomaniak Manager.
6. Click directly on the name assigned to the domain in question.
7. Activate DNSSEC from the Dashboard:
   
8. On the window that appears, enter the requested information with the data provided by Cloudflare (see point 4 above):
   1. Hash = Digest
   2. Hash Type = Digest Type
   3. Algorithm = Algorithm
   4. Key = Key Tag
9. Click on Activate:
   
10. In the case of a domain with extension.eu, the necessary details may be significantly different (see point 4 above):
    • The details under FLAGS will go under FLAGS
    • The details under PUBLIC KEY will go under PUBLIC KEY

This guide explains how to activate a CDN to optimize an Infomaniak Web Hosting.

Preamble

• CDN stands for "Content Delivery Network" in English, which translates to "Content Distribution Network" in French.
• A CDN stores a copy of your site's content (images, videos, CSS/JS files) on multiple geographically dispersed servers.
• When a user accesses your site, the CDN provides this content from the server closest to their location, thus reducing loading times:
  • Your site loads faster for visitors, which can reduce the bounce rate and improve the user experience.
  • By distributing the content, the CDN reduces the load on your main server, improving its performance and availability.
  • Some CDNs offer security features such as protection against DDoS attacks and data security.

Setting up a CDN

To use a CDN, you will generally need to make adjustments at the configuration level of your domain name, specifically at the DNS records level. This will direct the traffic of your website to the CDN's network of servers. Therefore, in general:

1. Create an account on the website of your chosen CDN and add your site to it.
2. Modify the DNS zone of your domain name according to the instructions provided by the CDN.
3. Test your site to ensure the CDN is working correctly.

Cloudflare-specific guide

For customers who want to optimize their site against the overload caused by the intensive passage of bots, using a CDN like Cloudflare is often recommended. The Cloudflare CDN allows you to optimize the performance and security of a website with features such as:

• caching of a site's static content
• minification of HTML, CSS, and Javascript code
• basic anti-DDoS protection
• etc.

To set up Cloudflare:

1. If necessary, create an account with Cloudflare.
2. Add the domain name of the site in question.
3. Report all DNS zone records of the domain in question to Cloudflare (A, MX, TXT, NS records, etc.).
4. On the Infomaniak Manager, modify the DNS of the domain in question with the DNS servers indicated by Cloudflare.
   • Configure DKIM and DNSSEC if necessary.
   • Any DNS addition/modification can take up to 48 hours to propagate.

Note: mod_cloudflare is enabled by default on all paid web hostings.

Enable Cloudflare Rate Limiting

By default, Cloudflare simply acts as an intermediary between the site and Infomaniak, forwarding all requests to the Infomaniak servers. Thus, during traffic spikes or attacks, requests still reach the origin server, but with Cloudflare IP addresses, making it difficult to manage mitigation on a shared server.

Setting up "rate limiting" rules in Cloudflare's application firewall is now an effective solution offered. This feature limits the number of requests sent to the server, blocking aggressive scans and protecting the server from excessive overloads.

And also…

… Amazon CloudFront

If you already use AWS services, CloudFront is easy to set up. Create a distribution, configure the settings, and link it to your site.

… Fastly

Sign up on Fastly, configure your service by adding your site and setting the cache parameters. Fastly offers advanced configuration options.

This guide is for you if you wish to change your current email provider and host your emails with Infomaniak.

Preamble

• To help you identify the offer best suited to your needs, refer to this other guide.

Moving your email to Infomaniak

To avoid losing any messages and experiencing any interruptions:

• Follow the links in order as they will open in a new tab in your browser, and return to this main guide after each completed step.
• If necessary, you can also migrate your:
  • Calendars
  • Contacts
  • and other data

You order a Mail Service only

Below are the different steps to migrate your mail service to Infomaniak securely.

Step 1: It is necessary to order the mail service by following this guide.

At the time of ordering, you can choose to transfer the domain name at the same time or to order the mail service alone.

You can then import the content of your old addresses to Infomaniak by following this guide.

Step 2: Once the addresses are configured and your old content imported, you will be able to link your external domain name to your Infomaniak Mail Service to start receiving emails at Infomaniak. You will need to follow the chapter "Link the external domain to your Mail Service" of this guide.

You will find here the MX / SPF to add in the DNS zone of your domain name:

SPF
Type: TXT
Host: Leave blank
Target: v=spf1 include:spf.infomaniak.ch -all

MX
Priority: 5
Host: Leave blank
Target: mta-gw.infomaniak.ch (for Gandi, it is necessary to add a point at the end "mta-gw.infomaniak.ch." )

Step 3 (optional): When everything is working correctly and if it has not already been done, you can transfer your domain name by following this guide.

Once the transfer is initiated, you should have access to the DNS zone of your domain name on the Infomaniak Manager. You can therefore check…

1. … in the DNS diagnostic if there are any corrections to be made and, if necessary, add the DNS entries that may be required for other services used with your domain name (newsletter or other).

2. … in the global security tab of your mail service if DKIM is properly activated.

If emails arrived during the migration with your previous provider, you can re-import the contents of your old addresses with Infomaniak by following this guide (duplicates are managed).

You order a kSuite

Below are the different steps to migrate your external mail service to an Infomaniak kSuite securely.

Step 1: Order kSuite from this page.

Once the order is completed, access your kSuite and add your domain name to it.

You can then create your email addresses and even import the content of your old addresses by following this guide.

Step 2: Once the addresses are configured and your old content imported, you will be able to link your external domain name to your Infomaniak Mail Service to start receiving emails at Infomaniak. You will need to follow the chapter "Link the external domain to your Mail Service" of this guide.

You will find here the MX / SPF to add in the DNS zone of your domain name:

SPF
Type: TXT
Host: Leave blank
Target: v=spf1 include:spf.infomaniak.ch -all

MX
Priority: 5
Host: Leave blank
Target: mta-gw.infomaniak.ch (for Gandi, it is necessary to add a point at the end "mta-gw.infomaniak.ch." )

Step 3 (optional): When everything is working correctly and if it has not already been done, you can transfer your domain name by following this guide.

Once the transfer is initiated, you should have access to the DNS zone of your domain name on the Infomaniak Manager. You can therefore check…

1. … in the DNS diagnostic if there are any corrections to be made and, if necessary, add the DNS entries that may be required for other services used with your domain name (newsletter or other).

2. … in the global security tab of your mail service if DKIM is properly activated.

If emails arrived during the migration with your previous provider, you can re-import the contents of your old addresses with Infomaniak by following this guide (duplicates are managed).

This guide is for owners of a domain name on the Infomaniak infrastructure who encounter a DMARC issue when using certain Google tools such as Meet or Calendar.

Resolve a DMARC error

To make your domain name configuration (with a DMARC policy of type reject) compatible with the use of certain Google services, it is necessary to add a corresponding SPF record:

• Before: v=spf1 include:spf.infomaniak.ch -all
• After: v=spf1 include:spf.infomaniak.ch include:_spf.google.com -all

To edit the SPF currently configured in the DNS zone of your domain name:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product concerned.
3. Click on DNS Zone in the left sidebar.
4. Click on the action menu ⋮ located to the right of the TXT type record containing the value of the SPF concerned.
5. Click on Modify:
   
6. Edit the field by adding on the same line include:_spf.google.com after the existing Infomaniak include, and this before the final -all.
7. Click on the Save button:
   

Refer to this Google documentation if you are looking for information on configuring Google's SPF.

This guide explains how to connect an domain name managed with Infomaniak to an external service.

Specific guides

Click on the link corresponding to the external service you wish to connect to your domain name registered with Infomaniak:

• Wix
• Shopify
• Google Sites
• dynamic devices such as a NAS, an Internet box, or smart home devices, etc.

Guide for any other external service

To connect your domain name to any other external service such as Odoo, Microsoft 365, Squarespace, follow the procedures below:

1. Click here to access the management of your product on the Infomaniak Manager (need help?)
2. Click directly on the name assigned to the product concerned.
3. Click on Connect a service in the left sidebar menu.
4. Click on the blue Connect button on the tile corresponding to your external service and follow the procedure:
   

If the external service you wish to connect is not in the list, you will need to manually modify some technical information about your domain name:

• Refer to this other guide to modify all DNS records if this is what you have been asked to do…
• … or this other guide if you only need to modify specific DNS records (for example, the MX record type if you need to link your domain to an external mail service).