Custom domains & TLS - included with every app →

Bring your own domain. We do the rest.

Point your domain at Sarpius. We verify DNS, issue TLS, and route traffic to the right app.

the difference

A custom domain shouldn't be a project.

Without Sarpius Router

~ a weekend
nginx.confserver blocks · listen 443 ssl · proxy_pass
certbot.shrenew --webroot · cron · reload
dehydrated/configACME challenge · hook script · domains.txt
zone.example.comA · CNAME · CAA · TTL juggling
/etc/cron.d/renew0 3 * * 1 · email on fail · pray

Five moving parts. One expired cert away from a Friday-night page.

With Sarpius Router

~ 1 minute
custom domain
shop.brand.io
https://shop.brand.io

One field. DNS, TLS and routing handled. Cert provisioning takes ~2 seconds the first time you add a domain - every request after that is milliseconds.

the edge surface

Every domain gets a managed certificate.

Sarpius Router verifies your DNS, issues a Let's Encrypt certificate, and renews it 30 days before expiry. You ship your app - we keep the lock closed.

shop.brand.io TLS · 30d api.acme.dev TLS · 12d staging.lumen.co TLS · 88d docs.helixhq.com TLS · 41d www.parallax.studio TLS · 5d app.driftgate.net TLS · 73d cdn.brightline.fm TLS · 21d admin.northstack.app TLS · 60d go.glassbeam.io TLS · 9d
0
Manual cert renewals
auto
Let's Encrypt issuance
ALIAS
Apex domain support
live
DNS verification in-app

Built for the domains
your customers actually type.

From a single brand domain to thousands of customer-supplied hostnames - Sarpius Router scales without you touching nginx.

bring your own domain

Plug your domain into any app.

Add a CNAME at your registrar, paste the domain into Sarpius Router, and we wire it up. Apex domains supported via ALIAS / ANAME.

CNAME ALIAS apex
multi-tenant

Customer-supplied hostnames at scale.

White-label one app behind thousands of domains. Every tenant gets their own cert, auto-issued and auto-renewed.

scales to thousands white-label
staging & previews

Same app, different hostnames.

Route staging.example.com to a preview branch, www.example.com to production - without juggling DNS zones.

staging.* www.* preview.*
TLS, hands-off

Let's Encrypt without the cron job.

ALPN-01 challenges happen at the edge. Renewals trigger 30 days before expiry. Failures page us - not you.

shop.brand.io · TLS · renews in 73d
what's new

Traffic routing that scales with your app.

Sarpius Router gained autoscaling-aware routing, bandwidth metering, and real-time pool health visibility.

Multi-replica round-robin

Requests spread across every healthy replica. Failed upstreams are pulled from rotation automatically - no manual config.

Bandwidth metering with warnings

Per-app bandwidth tracked at the edge. Email warnings fire at 80% and 100% of your included bundle before you overspend.

User-configurable hard cap

Set a traffic cap per app. Once reached, Sarpius Router stops forwarding requests - no surprise bandwidth bills.

Request-rate metering

Per-app RPS measured at the proxy, sent to the autoscaler. Scale-up and scale-down decisions use real edge traffic data.

Pool health visibility

Each router instance publishes replica counts and healthy counts in its heartbeat, giving ops a live view of every app pool.

Sub-second pool reload

When an app scales up or down, the routing pool refreshes in under a second via APP_REPLICA_CHANGED events - zero manual restarts.