This example assumes you are using all four domains above on a Drupal or WordPress multisite as outlined in Choosing Your Domain Structure, with the content served fully from the CDN.
It also assumes you want to use wildcard DNS for your publication as this means adding new publications does not require further DNS changes.
So the DNS for your production environment would be something like this:
- *.cms.mycorp.com - would point to your CMS server
- *.api.mycorp.com - would point to your CMS server, restricting authoring (and external) access
- *.cdn.mycorp.com - would point to your CDN, configured with the api. origin
- *.auth.mycorp.com - would point to your authentication server, using HTTPS
If you had a completely separate environment for QA (or pre-prod/staging/etc), it could be: