Skip to content

DNS & Request Routing

Adventive’s edge is a hybrid: the Enterprise zones front an established AWS platform (application load balancers, CloudFront, S3), while a growing set of hostnames resolve to Cloudflare-native services, Workers, R2, Pages, that carry the newer stack. Cloudflare sits in front of both, providing TLS, caching, and DDoS protection.

Request routing, proxied hostnames through the Cloudflare edge to origins Visitors HTTPS CLOUDFLARE EDGE Proxy · TLS · CDN cache · DDoS/WAF Workers runtime 31 scripts · routes + custom domains (AAAA 100::) cms · geo · api-dev · status · tools Access (Zero Trust) 15 apps · admin/api/db paths JumpCloud SAML · WARP Pages docs.adventive.dev R2 (public) media · static · email Passthrough (DNS proxy) to external origins below via proxied CNAMEs ORIGINS AWS, us-east-1 ELB production-adsads · amp · serve ELB production-consoleapi · console · appvast CloudFrontauth.* (com/stg/dev) S3 bucketsassets · html5 · vod · demo Cloudflare-native R2 storage Pages Workers Third-party SaaS HubSpot, support.* Stripe (SAML SaaS via Access) Private (via Tunnel) db-*-dev.adventive.dev → cloudflared → RDS / Aurora (see next diagram) Enterprise zones (adventive.com, adventivecdn.com) front the AWS ad/console/asset platform; Cloudflare-native services (Workers, R2, Pages, D1, KV, Queues, Hyperdrive) carry the newer stack. auth.* runs on CloudFront across all three environments.
OriginReached byExamples
AWS ALB, production-ads (us-east-1)Proxied CNAMEads, amp, serve
AWS ALB, production-console (us-east-1)Proxied CNAMEapi, console, apivast, appvast
AWS ALB, staging (us-east-1)Proxied CNAMEadmin, ads, api, console on staging
AWS CloudFrontProxied CNAMEauth.* on .com, .dev, staging
AWS S3 (website buckets)Proxied CNAMEassets, html5, video, vod, demo, university
Cloudflare R2Proxied CNAME → public.r2.devmedia, static, email
Cloudflare PagesProxied CNAMEdocs.adventive.dev
Cloudflare WorkersWorker route / custom domain (AAAA 100::)cms, www, geo, api.dev, status, tools
HubSpotProxied CNAMEsupport.adventive.com

Twenty-two records are proxied; the rest are DNS-only. The proxied set divides cleanly into AWS origins, Cloudflare-native origins, and Worker-fronted hostnames.

HostnameTypeOrigin
ads, ampCNAMEAWS ALB (ads)
api, apivast, appvast, consoleCNAMEAWS ALB (console)
console-testCNAMEAWS ALB (console-test)
authCNAMEAWS CloudFront
demo, universityCNAMEAWS S3
supportCNAMEHubSpot
media, staticCNAMECloudflare R2
www, apex, cms, gallery, brandguide, abd, geo-001, plugshare-geo, plugshare-geo-testAAAA 100::Cloudflare Workers (custom hostnames)

The AAAA 100:: placeholder records are the required marker for a Worker custom hostname. The record must exist before the Worker is bound to that route, or the first request returns a 1014 error. This is a documented Adventive convention.

Every record is a proxied CNAME to an AWS S3 website bucket, organised by asset type and environment: assets, billing, html5, override, video, and vod, each with -development and -staging variants alongside the production name. Two exceptions front the ads ALB (ads, serve), and email points to R2. A single Worker route, ads.adventivecdn.com/ad*, is served by edgecache-ad-router-production.

Thirteen proxied records mirror production against the shared staging load balancer (staging-1267721247.us-east-1), which serves admin, ads, amp, api, apivast, appvast, billing, and console. auth runs on CloudFront, media on R2, and three AAAA 100:: Worker hostnames cover the apex, abd, and cms.

The development zone is where the Cloudflare-native stack is most visible. Seven Worker hostnames (api, status, admin-api, genesis-admin, nr, productlove, abd) resolve as AAAA 100::; docs points to the Pages project; media to R2; auth to CloudFront; vod to S3; and ads-dev to an EC2 instance (3.93.1.210). The db-aggregate-dev, db-billing-dev, and db-console-dev hostnames, plus tunnel. All CNAME to the adv-cflared-dev tunnel, which is the entry point of the database access chain covered under Zero Trust & Security.

ZoneRoute patternWorker
adventive.commedia.adventive.com/brand/signatures/latest-post-title.pnglatest-post-title
adventive.devapi.adventive.dev/*adv-svc-public-api-dev
adventive.devstatus.adventive.dev/*adventive-status-worker-dev
adventive.devadmin-api.adventive.dev/*adv-svc-admin-api-dev
adventive.devgenesis-admin.adventive.dev/*adv-ui-admin-dev
adventive.devgenesis-admin.adventive.dev/api/*adv-svc-admin-api-dev
adventive.devnr.adventive.dev/*adv-svc-newrelic-proxy-dev
adventive.devproductlove.adventive.dev/*adv-ui-productlove-dev
adventive.iotools.adventive.io/*adventive-tools-gateway-worker-dev
adventivecdn.comads.adventivecdn.com/ad*edgecache-ad-router-production

Marketing and CMS Workers (for example on cms.*) bind via Workers Custom Domains rather than explicit routes, which is why their hostnames appear as AAAA 100:: records with no matching route entry.