View
Read
color-gradient

[ Reverse Proxy for Higher Ed ]

Can each college run its own site under the university's main domain

Yes. A reverse proxy running at the Cloudflare edge maps each college's own Webflow project to a path on the main .edu domain. The College of Engineering publishes in its own project, and visitors land on university.edu/engineering. Central IT keeps DNS, the routing rules and the root site. Departments never get publish rights to the root domain.

That is the whole governance answer. The proxy is a routing layer, not a shared login. It draws a hard line between what central IT owns and what a department owns, and the line holds whether you have four colleges or forty.

[ Governance Boundaries ]

Who owns what under one domain

What central IT keeps

Central IT holds everything that decides where a URL resolves, and can repoint any path without touching a department's project.

  • DNS and the certificate on the root domain.
  • The edge worker and the path map, which decides which project answers which URL.
  • The root site itself, including the homepage, admissions and anything a cabinet officer signs off on.
  • The ability to repoint any path without touching a department's project.

What a department keeps

Each college works inside its own project and ships without a ticket in the central queue.

The trade-off is real and worth saying plainly. Each project is its own design system unless you govern it. The proxy unifies the address, not the brand. Shared components, typography and a published pattern library are a separate piece of work, and skipping it is how you get fourteen shades of institutional blue.

  • Its own Webflow project, its own editors and its own publish button.
  • Its own release schedule, with no ticket in the central queue to ship a page.
  • Its own content model, because a nursing program and an alumni magazine do not need the same fields.

[ Review and Enrollment Speed ]

What one domain changes for compliance and for speed

Accreditation and disclosure review

Accreditation self-studies and consumer-information reviews ask you to point to published pages and show they are current. With scattered subdomains, that means chasing owners across departments and hoping the page a reviewer finds is the one you cited.

Under one domain, the path map is the inventory. Every URL in scope lives under a known path, with a known owner and a known project. When a program closes, you repoint the path instead of leaving an orphan subdomain live for three years.

Gated content follows the same logic. Student-facing applications and portals stay behind your identity provider, where they belong, and the proxy routes to them like any other path. Webflow SSO and IdP integration for higher ed covers that boundary in detail.

Performance is part of the governance case

Edge routing adds a hop, so the front end has to be fast enough to absorb it. This is where most legacy campus platforms are already losing. Only 48% of mobile websites pass all Core Web Vitals, according to HTTP Archive Web Almanac data from July 2025.

Mobile bounce probability rises 123% as load time goes from 1 to 10 seconds, per Google and SOASTA research from 2017. A prospective student on a phone, checking three programs between classes, feels every second of that.

The proxy does not fix a slow origin. It does let you move one college at a time onto a fast front end and measure the difference before the next college moves.

[ Architecture-First Build ]

What the build involves and what it costs

The migration sequence

The sequence is Architecture-First, meaning the path map and the governance rules are agreed before anyone designs a page.

  • Map the current estate. Every subdomain, owner, traffic level and redirect obligation.
  • Agree the path map and the ownership rules with central IT and the deans in the same room.
  • Stand up the edge worker and route one low-risk path to a test project.
  • Migrate college by college, with redirects from the retired subdomain in place at cutover.
  • Hand each department its project, its training and its publish rights.

Volume and budget

Volume is the part people underestimate. For M13, Ammo migrated 438 pages in 21 days off Contentful. For Uniqode, over 74 pages and 400 blog articles moved to Webflow on a site serving 200,000+ monthly visitors. A multi-college estate is a bigger version of that problem, done in waves.

On budget, Ammo's published pricing puts Growth Partner+ for enterprise scale at starting at $15,000 / month, and full builds run $70K-150K+. Plans are month-to-month, and new client onboarding is limited to 8 per month across all plans. Pricing is subject to change.

For the wider picture of how this fits a university's digital estate, see the higher education practice. If you are scoping this build and need the path map and migration waves sized against your actual subdomain list, book a strategy call and bring the inventory.

Separate subdomains against paths on one domain

What is at stake

Separate subdomains

Paths on one domain

Search authority
Links are earned by a separate property
Activity lands on one hostname
Department speed
A central queue, or a breakaway vendor site
Own project, own publish button
Content inventory
Chase owners across departments
The path map is the inventory
Retiring a program page
Orphan subdomain stays live for years
Repoint the path
Root domain control
IT inherits sites it did not build
IT keeps DNS, routing and the root site

Separate subdomains

Search authority
Links are earned by a separate property
Department speed
A central queue, or a breakaway vendor site
Content inventory
Chase owners across departments
Retiring a program page
Orphan subdomain stays live for years
Root domain control
IT inherits sites it did not build

Paths on one domain

Search authority
Activity lands on one hostname
Department speed
Own project, own publish button
Content inventory
The path map is the inventory
Retiring a program page
Repoint the path
Root domain control
IT keeps DNS, routing and the root site
[
Original Insight
]

A different route, not a stricter one

Subdomains are usually a truce, not a decision. A department waits months for a page, finds a vendor, and stands up its own subdomain because nobody can stop them. Central IT inherits a property it did not build and cannot patch. Everyone is now correct and nobody is happy.

The usual fixes make it worse. Pulling every site back into one CMS instance puts central IT back in the approval queue, which is the condition that caused the breakaway sites in the first place. A policy that forbids new subdomains does not give a dean a faster route to a program landing page before the application deadline. A proxy is a different route, not a stricter version of the old one, which is why it survives contact with a dean. Two related reads: how to decouple web development from central IT and how to escape the IT death march that follows a stalled platform project.

[
Our Customers
]

Don't just take our word for it.

Lauren Clements

“This is exactly the direction and the caliber of product I am accustomed to from Ammo.”

[
]
Lauren Martin Clements

“Switching from WordPress to Webflow has revolutionized our go to market strategy. We can now make updates so quickly without the hassle of dealing with developers.”

[
Startup
]
Jehron Petty

“Ammo Studio had our best interest in mind, consistently delivering high-quality work on time. Their team was dedicated to finding the best solutions, ensuring a smooth and successful project outcome.”

[
Startup
]
Kam Thandi

"Ammo made a huge difference for us. They quickly revamped our website, making it easier to update and manage. Our team, clients, and prospects love the result. We're thrilled with how everything turned out."

[
Startup
]
Nick Schwanz

"We needed a website that could really capture the essence of our brand and showcase the unique benefits of our chickpeas, both for food producers and for consumers."

[
Startup
]
Abigail Snodgrass

“Ammo’s clear, structured migration process was seamless. They felt like a true partner, aligning with our goals and providing quick, expert support. We’re thrilled with their flexibility and dedication.”

[
Enterprise
]
Morgan McCarty

"We needed a website that could keep pace with our rapid growth and allow us to make changes more efficiently. Our last platform on Contentful was a bottleneck for our marketing team."

[
Scale-up
]
Dillon Baxter

"The website is the number one thing... your face to the world. It's really important that that leaves a good first impression."

[
Startup
]

Score your Go-To-Market architecture

Enter your domain below to run our proprietary AI diagnostic. Instantly expose your current digital blind spots:

‍

  • Brand Risks & Compliance Vulnerabilities
  • Competitive Gaps in AI Search (AEO)
  • A "Sales Conversion Score" grading your buyer journey
  • Actionable, code-ready steps to stop pipeline bleed

Ready to rebuild your revenue engine?

Bypass the diagnostic. Speak directly with an Ammo Studio Solutions Engineer to map out your custom Webflow architecture, deployment timeline, and ROI.

[
Faq
]

Frequently asked questions

Does moving colleges off subdomains hurt our search rankings

Search engines treat a subdomain as a separate property, so links earned by an athletics or research subdomain do little for the main domain. Consolidating to paths puts that activity on one hostname. The risk is in the cutover, so every retired subdomain URL needs a one-to-one redirect to its new path at launch.

Can a department publish something central IT has not reviewed

Inside its own project and its own paths, yes, by design. What a department cannot do is publish to the root domain, change DNS, or claim a path that is not assigned to it. Set review requirements by content type in policy, not by holding the publish button.

How many Webflow projects can sit behind one domain

Each path in the map points to one project, so the count is a governance question rather than a hard ceiling. The practical limit is how many projects your team can keep on-brand and up to date. Most institutions start with a handful of high-traffic colleges and add waves after the first cutover proves out.

Do we have to migrate the whole university at once

No. The proxy routes path by path, so unmigrated subdomains keep running while you move the first college. You can stop after two colleges, run them for a term, and resume when budget clears.

What happens if the edge routing layer fails

Keep the routing rules in version control and keep each project reachable at its own origin. If a path needs to come out of the proxy, IT repoints it without waiting on a vendor. Agree that rollback step during the build rather than during an incident.