Auth0 Custom Domain DNS Lookup Shows A Record With IP Addresses Outside Tenant Region
Last Updated:
Overview
A Domain Name System (DNS) lookup for an Auth0 Custom Domain might return IP addresses outside the tenant's region because the Auth0 edge provider uses anycast routing. This is expected behavior and requires no configuration changes. For example, a DNS lookup for a Custom Domain for a UK-1 tenant might show an A record with an IP address from the United States.
Applies To
- Auth0
- Custom Domains
- DNS Routing
Cause
This is expected behavior. Auth0’s edge provider leverages anycast routing, which can result in traffic being directed to any of its data centers, “typically the nearest node.” So this does not always mean that traffic will take the same route to our origin servers for any given request. Anycast routing means traffic does not always take the same route to the origin servers for a given request. The edge provider directs the traffic to the nearest node to optimize performance.
Solution
Why does the DNS lookup show IP addresses outside the tenant region?
This is expected behavior. The Auth0 edge provider directs traffic to the nearest node to optimize performance, requiring no configuration changes.
Auth0 Custom Domain DNS lookups display IP addresses outside the tenant region because the edge provider leverages anycast routing.
