Project Name
SFCC B2C eCDN Legacy Zone to Proxy Zone Migration
A large e-commerce enterprise operating two Salesforce Commerce Cloud (SFCC) B2C storefronts faced increasing infrastructure governance and compliance challenges due to its dependency on the legacy eCDN Zone architecture. Under the Legacy Zone model, storefront domains pointed directly to Salesforce-managed IP addresses, limiting the organization’s visibility and control over DNS routing.
As regulatory requirements and operational governance standards evolved, the company needed greater ownership of its DNS infrastructure, improved auditability, and the ability to independently manage routing configurations without relying on Salesforce support processes.
Ksolves , an AI-first company and Salesforce Summit Partner, partnered with the client to migrate both storefronts from SFCC’s Legacy eCDN Zone architecture to the modern Proxy Zone model. The migration was completed within three weeks with zero production downtime, restoring DNS ownership while ensuring uninterrupted customer experiences across both storefronts.
The challenges faced by the client are as follows:
- Limited DNS Ownership and Control: The Legacy Zone architecture required storefront domains to point directly to Salesforce-controlled IP addresses, preventing the internal team from independently managing DNS routing.
- Compliance and Audit Constraints: The organization faced challenges providing complete DNS resolution visibility and audit trails required for PCI-DSS and internal governance reviews.
- Dependency on Salesforce Support: DNS-related changes and troubleshooting often require Salesforce support involvement, slowing operational response times and reducing agility.
- Lack of Self-Service Traffic Management: The infrastructure team could not independently execute DNS routing changes, failover activities, or validation procedures during operational events.
- Risk During Platform Changes: Because routing depended on static Salesforce-managed IP mappings, infrastructure teams had limited transparency into backend routing modifications.
- Business Continuity Requirements: The migration needed to be executed without impacting live storefront traffic, customer transactions, or shopping experiences.
Ksolves designed and executed a structured migration strategy that modernized the storefront routing architecture while maintaining uninterrupted business operations.
- Proxy Zone Migration Planning: Conducted a detailed assessment of the existing Legacy Zone configuration across both storefronts and developed a phased migration roadmap.
- CNAME-Based Routing Architecture: Reconfigured storefront domains to leverage Salesforce-assigned Proxy Zone CNAME targets hosted within the *.cc-ecdn.net namespace, replacing direct IP-based routing.
- DNS Governance Modernization: Enabled the client to manage DNS routing directly through its corporate DNS infrastructure, improving ownership and operational flexibility.
- Zero-Downtime Migration Execution: Carefully coordinated DNS cutover activities, TTL optimization, and validation processes to ensure uninterrupted storefront availability throughout the migration.
- Compliance Readiness Enhancement: Established a routing model that provided greater transparency, auditability, and documentation capabilities for compliance reviews and governance assessments.
- Future-Proof Infrastructure Design: Implemented Salesforce's recommended Proxy Zone architecture, allowing Salesforce to manage backend edge infrastructure dynamically while preserving stable storefront routing.
Technology Stack
| Category | Technology |
|---|---|
| E-Commerce Platform | Salesforce Commerce Cloud (SFCC) B2C |
| Content Delivery Network | SFCC eCDN Proxy Zone |
| DNS Architecture | CNAME-Based Routing |
| Infrastructure Management | Merchant-Controlled DNS |
| Edge Delivery | Salesforce Edge Network |
| Security & Compliance | PCI-DSS Aligned DNS Governance |
- 2 Storefronts Successfully Migrated: Both SFCC B2C storefronts were migrated from Legacy Zone to Proxy Zone within the planned implementation timeline.
- Zero Production Downtime: The migration was completed without any disruption to storefront availability, customer traffic, or online transactions.
- Full DNS Ownership Restored: Internal teams gained direct control over storefront DNS routing through their corporate DNS infrastructure.
- Improved Compliance Readiness: Enhanced DNS visibility and routing transparency simplified audit preparation and compliance validation activities.
- Reduced Operational Dependency: The organization no longer relies on Salesforce support for routine DNS routing management and validation activities.
- Enhanced Infrastructure Governance: The new architecture provides a clearer separation between merchant-controlled DNS management and Salesforce-managed edge infrastructure.
- Future-Ready Routing Architecture: The Proxy Zone model enables Salesforce to optimize backend infrastructure dynamically while maintaining stable storefront routing configurations.
Ksolves successfully modernized the client’s SFCC B2C infrastructure by migrating two storefronts from the Legacy eCDN Zone model to Salesforce’s Proxy Zone architecture.
The migration delivered full DNS ownership, improved governance capabilities, enhanced compliance readiness, and eliminated operational dependencies associated with static Salesforce-managed routing. Most importantly, the transition was completed with zero downtime, ensuring uninterrupted customer experiences throughout the project.
Through Salesforce Migration services, Ksolves helps organizations modernize storefront infrastructure, improve governance controls, and adopt scalable architectures that support long-term e-commerce growth.
Ready to Modernize Your SFCC Infrastructure and Gain Full DNS Control?
