shiftzero

Managed proxy (CNAME)

The zero-infrastructure path: no worker to deploy, no code to run. Connect your site by setting two fields and pointing a CNAME.

How it works

A single multi-tenant proxy worker serves many sites. It looks up the incoming Host header against the dashboard’s per-project config — your origin URL, running experiments, audiences, holdout — and applies exactly the same assignment + transform as a dedicated worker.

Connect a site

  • In the dashboard, set your project’s Domain and Origin URL (Settings → General).
  • Point a CNAME for your domain at the proxy host.
  • That’s the install. Experiments you start in the dashboard are live on the next config pull.

Self-hosting the proxy

Operators deploy the proxy worker once and set a shared secret on both sides:

# proxy worker
wrangler secret put SZ_PROXY_SECRET

# dashboard env
SHIFTZERO_PROXY_SECRET=the-same-secret

The proxy fetches per-host bundles from /api/proxy/config?host=…, authenticated with that secret. Unknown hosts get a 404 with guidance, never a proxy loop.