Manage a shield configuration

You can modify a shield configuration at any time. Complete any of these procedures to manage a shield.

📘

You currently cannot delete a shield configuration in Control Center. To delete a shield, contact your ​Akamai​ account representative.

Change filtering modes for a zone

Complete this procedure to change the filtering modes for a shield zone.

To change filtering modes for a zone:

  1. In Control Center, do one of the following:
    • Go to ☰ > DNS SOLUTIONS > Edge DNS. At the top of the page, click Shields list. The Shields List page appears.
    • Go to ☰ > DNS SOLUTIONS > Shield NS53. The Shields List page appears.
  2. Go to the shield that contains the zones you want to modify.
  3. Click the name of the shield or click Edit Shield.
  4. In the Shield zones area, click a zone name. The edit window for the shield zone appears.
  5. In the Filtering mode menu, select a new filtering mode for the zone.
  6. If you select Automatic and you want to secure your zones with a TSIG key, create or upload a TSIG key.
  7. If you select Manual, configure domains for the selected zone. You can upload a zone file or you can provide domains in the provided text box. When providing names in the text box, you can use wildcards to allow requests from different subdomains. For example, you can add *.example.com as a name to allow requests from www.example.com and www2.example.com. If you choose to upload a zone file, only the names are extracted from the file.
  8. Click Save changes.

Add domains for manual filtering

If you created a shield zone that uses manual filtering, you must define the DNS resource records that you want to allow. Incoming queries are checked against the list you configure to determine whether Shield NS53 should reject or forward the queries to your name servers.

To perform this operation with the Edge DNS API, see Manage manual filter names.

To add domains for manual filtering:

  1. In Control Center, do one of the following:
    • Go to ☰ > DNS SOLUTIONS > Edge DNS. At the top of the page, click Shields list. The Shields List page appears.
    • Go to ☰ > DNS SOLUTIONS > Shield NS53. The Shields List page appears.
  2. Go to the shield that contains the zone you want to modify.
  3. Click the name of the shield or click Edit Shield.
  4. In the Shield zones area, click the zone name. The edit window for the shield zone appears.
  5. Do one of the following to add domains:
    • In the Add filter names text box, enter the domains. When providing names in the text box, you can use wildcards to allow requests from different subdomains. For example, you can add *.example.com as a name to allow requests from www.example.com and www2.example.com.
    • Click Upload zone file to upload a zone file. Only the names in the file are extracted.
  6. Click Save changes.

Edit a shield

You can modify settings for a shield configuration, including name server IP addresses, name server health check information, alternate transfer targets, and the filtering modes for zones. You can also add or delete zones.

To edit a shield:

  1. In Control Center, do one of the following:
    • Go to ☰ > DNS SOLUTIONS > Edge DNS. At the top of the page, click Shields list. The Shields List page appears.
    • Go to ☰ > DNS SOLUTIONS > Shield NS53. The Shields List page appears.
  2. Go to the shield that contains the zones you want to modify.
  3. Click the name of the shield or click Edit shield.
  4. To change name server information, enter new IP addresses or provide a new record for the health check.
  5. If you use automatic filtering in the zone, you can modify alternative transfer targets. Click Add alternate transfer targets to configure new IP addresses.
  6. To change the filtering modes for a zone, see Change filtering modes for a zone.
  7. To add one or more zones, click Add zones. For detailed steps, see Add shield zones and assign filtering modes.
  8. To delete one or more zones, in the Shield zones area, select the zone or zones, and in the actions menu that appears, select Delete.
    A message appears that indicates you can run safety checks before the delete operation is completed. These safety checks confirm the selected zones are not delegated to ​Akamai​ and are not receiving traffic. To perform these safety checks, select Run safety checks. Click Delete to continue with the delete operation. If the checks find no issue, the zone or zones are deleted. Otherwise, a message appears that explains why the delete operation was unsuccessful.
  9. Click Save.