DNS “Protect” Toggle (Managed Proxy)

[brian-toresdahl-datum]

Summary

Propose that we add a simple Protect toggle in the DNS product for A / AAAA / CNAME records, available only when the zone uses Datum-managed authoritative DNS. When enabled, requests are served through a managed proxy without exposing proxy details.

Key UX Principle

• Zone records stay the same before/after toggling Protect (users keep seeing the values they entered).
• Public DNS responses may be managed/dynamic under the hood.
• Proxy mechanics (addresses, routing, etc.) are abstracted away.

Contrast (why this is different)

Some proxy features intentionally show the proxy URL/address to developers because the details matter and are shared directly. DNS Protect is the opposite: the details should be hidden.

[bmertens-datum]

We should expose the Proxy details. We are managing DNS for customers and the UI should represent what's inside of their zone file. We have enough screen real-estate available to add a WAF Mode and an endpoint column. I'll mock something up so we can click through the functionality.