DNS management in a multi-tenant setup

#laravel #webdevelopment #webdev
DNS management on a larger scale, for example in a multitenant application, can be a a massive pain. In this video we’ll be taking a look at how you can manage hundreds, if not thousands of custom domains for your multi-tenant application, without a headache!
00:00 - Introduction
00:16 - Multitenant DNS management
01:50 - Configuring custom domains
03:08 - Dynamic reverse proxies
06:13 - Final words

[@lucascairesd]

Very helpful! Thank you! Your content is amazing! You bring us topics that are not often discussed in the Laravel/PHP ecosystem!

[@sabatino-dev]

Glad it was helpful!

[@tschoo6476]

Good insights, thank you. Love the multi-tenancy/SaaS topics. For my SaaS, I have the clients set up a CNAME to my domain instead of an A record, so I have the IP under control. I add the custom client domain as Alias in Laravel Forge, then re-issue the cert. Let's Encrypt is limited to 100 aliases though, but I'm just starting out, so that's not a problem. Keep up the good work!

[@sabatino-dev]

Sure, but CNAME doesn’t work for root domains unfortunately, only for subdomains.

[@marcsollie2968]

@@sabatino-dev Whilst that is true, CNAME flattening has been a thing nowadays with many modern DNS providers, which could make it a better manageable option in many cases.

[@overengineeringsimplified]

Very helpful information ❤ Looking forward to your videos 🎉🎉

[@sabatino-dev]

Glad you like them!

[@himesh_89]

Thank you

[@sabatino-dev]

You're welcome, hope it was helpful!

[@shocchosolutions6275]

Your applicatiom demo plz​@@sabatino-dev

[@rhyzo1]

Great Video! - I'm currently tackling this problem for laravel multi-tenancy. What do you think about "Cloudflare Custom Hostnames" and then using the "Flexible" SSL Option to eliminate having to create certificates and finally adding an Alias using the laravel forge API.

[@sabatino-dev]

It’ll probably work, but IMO doing Nginx config work in Forge for every custom domain will bite you in the ass down the line. If you need to scale for example, you’ll be burdened with a massive amount of config changes.

[@danygagnon8446]

You are so amazing and I am so happy that I pressed the bell on the subscribe. You are a gem seriously, thank you. This is so valuable. Have you ever done database replication for your company?

[@sabatino-dev]

Thanks for the kind words! 🙏 we do replication on AWS RDS, and AWS DMS has been a massive help to migrate our database to RDS.

[@kenlin2135]

Very helpful!. @sabatino , I was wondering. use ceryx to proxy the requests to target loadbalance. do we need to dynamic add server block on nginx? since the beginning of this videos you said no need to change ngxin config. how does target server's nginx server handle requests with custom domain. ? Updated: after try it out. get error 629 SSL_do_handshake() failed (SSL: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure) while SSL handshaking to upstream

[@sabatino-dev]

The target server should handle things automatically, since Ceryx rewrites the host header. No additional Nginx config is needed on the target.

[@kenlin2135]

@@sabatino-dev thanks. I try Traefik Yesterday, also works did learn something.

[@kenlin2135]

@@sabatino-dev I did solve the redirect issue. for everybody. just make sure laravel application should trust the proxy in the middleware. This make it works. thanks buddy, This way is more easy maintanable.

[@sabatino-dev]

@kenlin2135 nice!

[@krystianh4384]

Very interesting content, thank you! Could you share your practices on handling tenant/user ids?

[@vitorlfelix]

If I’m not mistaken he has a video with this content.

[@sabatino-dev]

This video covers it: Learnings from our multi-tenant Laravel application kzbin.info/www/bejne/gp7SoZhreMmAZ5I

[@yoskokleng3658]

for sub domain of each users. did u use wildcard domain name?

[@sabatino-dev]

Yes, wildcard subdomain DNS record!