Custom domain invalid configuration with custom firewall

Hi,

I’m having some trouble to configure a custom domain for one of our client (we’re offering a white label solution).

  1. I’ve set up their domain on my project’s custom domains and assigned it a branch.
  2. I’ve asked my client to update their DNS record, which they did, and the configuration was working fine
  3. However, they have a mandatory Web Application Firewall (WAF) that they have to put in between, and as soon as they activate it, I get an Invalid Configuration error on the domain settings.

The website is still up and working as I think the SSL certificate was generated once, when the WAF was off, but it can break at anytime if it can’t be renewed.

From the documentation, I saw that Let’s encrypt needs an access to /.well-known/acme-challenge/, but when I try a GET on this route I get a 404.

How can I make the configuration pass while still having the WAF (as it’s not negotiable on my client’s side)?

Thanks in advance for your help

There’s another community post with 404 debugging tips that might be helpful. Please give these solutions a try and let us know how it goes.

A human should be around soon to offer more advice. But you can also get helpful information quickly by asking v0.

Hi @kbee1, welcome to the Vercel Community!

When you say WAF they put in, which two components is the WAF between?

Can you try adding another random domain to their project and see it works with the Firewall?