Status, settings and limits
Domain status badges, the zone settings DNA applies, and how DNS and your origin are served.
Domain status
| Badge | Meaning | What to do |
|---|---|---|
| Waiting | The zone is ready; the registrar change hasn't propagated yet | Wait for the email, or press Check again on the Setup tab |
| Connected | Requests pass through DNA | Nothing |
| Not switched on | The zone exists, but DNA isn't in front of it | Click Switch DNA on. If it fails, email hello@d3.com |
| Needs attention | A question is open before the nameservers can move, or after | Open the domain: its Setup tab names the step |
| Paused | You paused DNA; traffic goes straight to your site | Settings → Switch DNA on when you're ready |
| Disconnecting | You started leaving; DNA waits for the nameservers to move | Finish the steps in Disconnect a domain |
Zone settings
DNA sets these on every zone so your hosting keeps working as it does today:
| Setting | Value | Why |
|---|---|---|
| Always Use HTTPS | Off | Vercel and Shopify renew certificates over http://; your site keeps its own redirect |
| SSL mode | Full | Traffic to your origin stays encrypted, whichever certificate the origin serves |
DNS and origin
- DNS: DNA serves the domain's DNS from 300+ locations, mail records included, so your domain and mail resolve through DNA. To keep your current DNS host, use the middleware instead.
- Origin: to send every request through DNA, accept only DNA at your origin (client certificate or IP allowlist), or use the Vercel or nginx middleware.