> For the complete documentation index, see [llms.txt](https://docs.tcpshield.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tcpshield.com/miscellaneous/wildcard-dns.md).

# Wildcard DNS

This documentation covers the setup of wildcard DNS.

Wildcard DNS is beneficial for networks that need to dynamically generate subdomains for different servers or purposes, such as `xyz.domain.com`, `cracked.domain.com`, etc., without the need for individual DNS entries for each subdomain. This setup will guide you through the process and ensuring that all subdomains are secured and directed appropriately.<br>

## Step 1: Verify your root domain:

Follow this [step](https://docs.tcpshield.com/panel/panel-configuration#step-4-add-domains) in our documentation to verify your root domain. This step is crucial as it verifies ownership and controls DNS settings, which are needed for proper configuration and protection.

## Step 2: Adding your subdomain:

On your DNS manager (we will be using Cloudflare in this demonstration), add a new CNAME record with this configuration:

* Name: \*
* Target: your protected CNAME target
* Proxy status OFF

<figure><img src="https://530345640-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MWXTvAX8gueFZ5txjDV%2Fuploads%2FBcAhhN8HmrQVBwFau1KQ%2Fimage.png?alt=media&amp;token=a822a013-ef79-4e98-86d1-4a6f83c2f161" alt=""><figcaption><p>Example of a wildcard subdomai on Cloudflare</p></figcaption></figure>

And that's all you have to do.

{% hint style="info" %}
If your configuration doesn't work immediately, it might be due to DNS [propagation](https://docs.tcpshield.com/miscellaneous/pages/zPcw0psLWpTEYm0nnIGl#id-3.-how-dns-propagation-works).
{% endhint %}

By following the steps outlined above, you can ensure that all subdomains under your domain are protected against DDoS attacks while maintaining flexibility in how you manage your DNS settings.