Skip to content

Commit e3f7c14

Browse files
committed
Update DNS record instructions for browser-based RDP
Update DNS record instructions to be more descriptive on how to handle a AAAA record and a CNAME record.
1 parent 6571f09 commit e3f7c14

File tree

1 file changed

+20
-12
lines changed
  • src/content/docs/cloudflare-one/connections/connect-networks/use-cases/rdp

1 file changed

+20
-12
lines changed

src/content/docs/cloudflare-one/connections/connect-networks/use-cases/rdp/rdp-browser.mdx

Lines changed: 20 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,26 @@ Browser-based RDP can be used in conjunction with [routing over WARP](/cloudflar
3434

3535
<Render file="access/add-target" params={{ protocol: "rdp" }}/>
3636

37-
## 3. Create an Access application
37+
38+
Cloudflare must be aware of your publically routed domain to proxy browser-based RDP traffic to your private network; this includes any [subdomain](/dns/manage-dns-records/how-to/create-subdomain.mdx) you wish to utilize.
39+
40+
To do this, please ensure there is a corresponding DNS record for your full domain. This enables Cloudflare to source browser-based RDP traffic to your private network. For example, if you would like browser-based RDP traffic to go through `rdp.example.com`, where `rdp` is the subdomain and `example.com` is the main domain, you need to ensure there is a Cloudflare DNS record for `rdp`.
41+
42+
In the [Cloudflare dashboard](https://dash.cloudflare.com/login), select your domain, then go to **DNS** > **Records** and verify that a [DNS record](/dns/manage-dns-records/how-to/create-dns-records/) exists for your domain. Again, the subdomain *must* have a record as well. Any arbitrary DNS record will work.
43+
44+
If you do not already have a DNS record, [create a new DNS record](/dns/manage-dns-records/how-to/create-dns-records/#create-dns-records). Using `rdp.example.com` for demonstration, create an `AAAA` record that points your Access application public subdomain (`rdp`) to the IPv6 [discard address range](https://www.rfc-editor.org/rfc/rfc6666.html):
45+
46+
- **Type**: _AAAA_
47+
- **Name**: `rdp`
48+
- **IPv6 address**: `100::`
49+
- **Proxy status**: On
50+
51+
:::note
52+
If you choose to create a _CNAME_ DNS record instead, *the Target field must be a fully qualified domain name.* It is *NOT* the target ID that you created in step (2). Using the example above, `rdp` would be the record Name and the Target field would be `www.rdp.example.com`. Proxy status would also need to be set to "On."
53+
:::
54+
55+
56+
## 4. Create an Access application
3857

3958
<Render file="access/self-hosted-app/create-app" />
4059

@@ -82,17 +101,6 @@ Ensure that only **Allow** or **Block** policies are present. **Bypass** and **S
82101

83102
19. Select **Save**.
84103

85-
## 4. Create a DNS record
86-
87-
In the [Cloudflare dashboard](https://dash.cloudflare.com/login), go to **DNS** > **Records** and verify that a [DNS record](/dns/manage-dns-records/how-to/create-dns-records/) exists for your domain. The DNS record allows Cloudflare to proxy browser-based RDP traffic to your private network. Any arbitrary DNS record will work.
88-
89-
If you do not already have a DNS record, [create a new DNS record](/dns/manage-dns-records/how-to/create-dns-records/#create-dns-records). For example, you could create an `AAAA` record that points your Access application public hostname (`app.example.com`) to the IPv6 [discard address range](https://www.rfc-editor.org/rfc/rfc6666.html):
90-
91-
- **Type**: _AAAA_
92-
- **Name**: `app`
93-
- **IPv6 address**: `100::`
94-
- **Proxy status**: On
95-
96104
## 5. (Recommended) Modify order of precedence in Gateway
97105
<Render file="access/modify-gateway-policy-precedence" product="cloudflare-one" params={{ selector: "Access Infrastructure Target" }} />
98106

0 commit comments

Comments
 (0)