use dns entry that goes around cloudfront