What is Changing?
Beginning May 15, 2025, we will enforce stricter configuration of DNS records for all website domains. Incoming traffic on improperly configured domains will be restricted, which could affect your website functionality and availability.
There will be a test window of the changes on March 20, 2025 (00:00 – 23:59 EST), before the actual enforcement date. During the test window, traffic to a domain with an incorrect DNS setup will be blocked.
Required Actions
You must update your DNS configuration before the enforcement date on May 15, 2025. You should aim to make your updates before the test window, so that after making changes, you can use the test window from March 20, 2025 (00:00 – 23:59 EST), to ensure that your websites are working properly. To determine if a domain is configured correctly, you can check the DNS Status on the Set Up Domains page:
- In NetSuite, navigate to Commerce > Hosting > Domains.
- You will see a list of your domains.
- Click View for the domain you want to verify.
- In the Status section, the DNS Status field displays a green checkmark if the DNS record is set up correctly. If you see a red X, then something in your DNS configuration is incorrect and must be changed.
- Note: The DNS Status might incorrectly tell you that your DNS record is not configured properly if you are using a second level domain. If you are using a second level domain, the system thinks your setup is incorrect, but it could be acceptable if you have configured CNAME flattening correctly. Check your CNAME flattening setup and test use of your website during the test window to ensure your DNS setup is acceptable despite lacking a green checkmark. For more information, see the CNAME Flattening section of the Website Domains and Email Hosting help topic, SuiteAnswers ID 42736.
- In the Status section, the DNS Verification Status field displays a green checkmark if you have correctly configured DNS verification. This is determined using the Automatic Certificate Management Environment (ACME) protocol to confirm ownership of your domain when requesting a certificate. For more information, see Set Up DNS Verification, SuiteAnswers ID 1016315.
- Note: DNS verification only applies to secure domains. If you are using a non-secure domain, the error for the DNS Verification Status field does not apply, but you should consider switching to a secure domain and setting up DNS verification.
If you determine that your DNS is not configured correctly, you must review your configuration in NetSuite and with your DNS provider.
Note: DNS updates should be handled by someone with experience in this area. DNS setups and procedures can vary according to your provider, so be sure to consult your provider’s documentation.
Use the following help topics to review your domain setup and make the necessary changes:
- Set Up a Domain, SuiteAnswers ID 78143
- Point Your Domain Name at Your Domain (DNS Settings), SuiteAnswers ID 27482
- Importance of Proper DNS Setup, SuiteAnswers ID 1019573
- Troubleshoot Domain Setup Errors, SuiteAnswers ID 78125
- Troubleshoot DNS Issues with the CDN, SuiteAnswers ID 103484
Important: As you make changes, there can be delays between changing your setup and seeing the green check mark indications on the domain record. If you make changes during the test window to fix blocked traffic, there can also be delays for your website to reflect these updates. The DNS configuration can take several hours or days to update.
Related Upcoming Changes
When reviewing your domain and DNS configuration, you should also consider these related upcoming changes to domains, as they could affect your setup:
- Discontinuation of non-secure domains
- Non-secure domains are those not secured with a proper SSL certificate and have a URL beginning with http:// (as opposed to https:// for a secure domain)
- Effective starting early April 2025
- Discontinuation of several NetSuite domain types
- Domain types to be discontinued have the following URL formats (where <accountID> represents your account ID):
- <accountID>.shop.netsuite.com
- <accountID>.secure.netsuite.com (also referred to as a default secure checkout domain)
- Effective starting early April 2025