DNS redirector based on TXT records. More information in our internal wiki.
Resolved redirect definitions are cached inside the Worker based on the DNS hostname being queried. Positive cache entries use the TXT record TTL (with the existing minimum TTL floor), and "not found" lookups are cached briefly to reduce repeated DNS-over-HTTPS misses.
The worker exposes POST /internal/cache/purge to clear the Worker cache, including cached redirect-resolution entries.
Configure the shared secret before using it:
npx wrangler secret put PURGE_TOKENThen call the endpoint with the same token in the X-Purge-Token header.