05 Subdomain Settings

Subdomain Settings

In Subdomains -> Edit, you can manage each subdomain in detail.

A) General Routing

• Set the subdomain connection profile:
  • HTTP (default)
  • Streaming
• Change upstream URL
• Enable No TLS Verify (for internal self-signed targets)
• Enable/disable HA
• Manage backend name + URL entries

Note:

• Streaming optimizes upstream proxy behavior for stream-like traffic.
• Core security gates stay enabled regardless of profile.
• If you need more profile types, open a GitHub Issue / Feature request.

B) Auth Page (pre-access login page)

• Enable for sensitive services
• Dedicated credentials per subdomain
• Not the same as admin credentials

C) GeoIP Access Policy

• Off
• Allow List Countries
• Deny List Countries

Examples:

• Allow only DACH: allow + DE,AT,CH
• Block specific countries: deny + country codes

Notes:

• Presets like EU, DACH, North America are available
• Local/private clients are treated as LOCAL

D) Diagnostics

Badges show:

• DNS
• HTTP
• HTTPS
• TLS
• For HA: Hosts Online x/x

E) Traffic Gating Modes

In the subdomain command center, you can control runtime access behavior:

• Maintenance On/Off
  • External/public visitors see a maintenance page.
  • LAN visitors still reach the real upstream.
  • Hairpin/NAT-loopback calls are treated as local when the client appears as the server public IP.
• Disable/Enable
  • Fully blocks the host and returns a Host Disabled page for everyone.

Use Maintenance for planned work and Disable for hard isolation.

F) Traffic & Visits (24h)

In the subdomain detail view, directly below Subdomain Summary, you now get traffic gauges and counters:

• 2xx Rate (successful response ratio)
• 4xx/5xx Rate (error ratio)
• Geo Block Rate (requests blocked by GeoIP policy)
• Visitor Ratio (unique visitors relative to requests)

Additional 24-hour counters:

• total requests
• traffic out (response bytes)

Notes:

• Data is persisted in SQLite and updates continuously.
• Very new subdomains may need a short time (or some real traffic) before values appear.

G) Danger Zone

• Delete Subdomain requires explicit confirmation:
  • type Remove exactly
  • only then deletion is executed