k8s-networking

Patterns and decisions for DNS, Ingress, TLS, network policies, and VPN access in self-hosted Kubernetes clusters.

DNS Record Quick Reference

Record	Use when
A	Map domain/subdomain → IPv4 address. Use for your server's public IP.
AAAA	Map domain/subdomain → IPv6 address. Use when your server has a public IPv6.
CNAME	Delegate a subdomain to another hostname (e.g., `www.example.com` → `example.com`). Cannot be used at the apex (`@`).
MX	Specify the mail server for a domain.
TXT	Arbitrary data: domain ownership verification, SPF, DKIM.
NS	Delegate a zone to specific name servers. Set by your registrar.

Self-hosting setup: Create an A record pointing your domain apex (@) to your server's public IP. For www redirect to work with NGINX Ingress, also create an A record for www (or a wildcard *.example.com).