Migrate resources.data.gov and strategy.data.gov from cloud CDN service to external domain service #5582
Description
cloud.gov is retiring the CDN routes broker we currently use for resources and strategy. This needs to be done by Feb 1, 2026
From cloud.gov
How to migrate your service(s) depends on whether the domain(s) are apex domains or not. You may need to consult with your DNS provider to determine if your domain(s) use apex records or not.
Migrating services using non-apex domains
Follow the steps documented on our website to create the DNS records expected by our external domain service broker.
Make sure to validate that the DNS records function as expected before updating your domain’s DNS records.
Once the necessary DNS records are created, an automated job will automatically migrate your domain service to an external domain service. There is no downtime expected for this migration.
Migrating services using apex domains
Downtime is required for service(s) using apex domain because their DNS records are usually pointed directly at CloudFront DNS names and these records must be deleted before a new CDN service can be created for those same domain(s).
Once the DNS records for the apex domain(s) are deleted, the domain will no longer respond to requests.
Given the need for coordination between DNS updates and the provisioning of new CDN services, please schedule a time with the Cloud.gov Pages team to perform these migration steps together on a call by emailing [email protected] or responding to this email.
Please allow one to two hours for a meeting to perform the full migration process. And please make sure that you can make updates to your DNS configuration quickly, preferably by having your DNS support team on the call if possible. Inability to make DNS changes quickly will prolong the downtime period for your domain(s).
The migration steps that need to be performed for service(s) using apex domains are:
Follow the steps documented on our website to create the _acme-challenge DNS records expected by our external domain service broker.
Delete the DNS records for the apex domain(s). Expect downtime from this point on.
Coordinate a scheduled time with the Pages operations team to handle the migration of your CDN service(s).
Once the Pages team has migrated your CDN service(s), they can provide you with updated CloudFront DNS names for any apex domain records
Update any DNS apex domain record(s) to use the new CloudFront DNS names. Once the DNS changes have finished propagating, the domain(s) should be responding again and the downtime should be complete.
Questions?
If you have any questions about how to upgrade your DNS records or if you experience any issues, please contact us at [email protected].