Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I run a few application clusters within a cloud-based host. We've grown to the point where I need some sort of internal DNS scheme to keep all of the servers straight. I'd like to run a server with BIND9 installed to solve this problem.

Right now, the internal team members VPN into the cloud and then connect on each respective server's private interface. I'd like to modify the VPN server to use this new BIND DNS server. How do I configure BIND so that I can provide internal entries for my servers, but also allow anyone who is connected via VPN to still access external sites such as or

All external DNS entries for my load balancers are handled offsite, so there is no need for the BIND server to provide any DNS capabilities to the outside world.

I will be using BIND on Ubuntu 10.04, so answers in the context of Debian are preferred (but I'll take what I can get).

Thanks, Greg

share|improve this question
up vote 1 down vote accepted

You need to set up bind to be the master DNS server for your 'cloud' zone and then have it forward other requests on to whichever DNS servers you currently use. Have a look at the Ubuntu Bind 9 documentation for the configuration specifics.

share|improve this answer
Thanks for the reply. I managed to get that far on my own, but I'm looking for advice from someone who has done this before to make sure I configure it properly. – GregB Mar 29 '11 at 22:07
@GregB: I've done what you want to do. The article I linked to should help you get there. If you have any specific questions ask them on SF. That's what it's here for. – Iain Mar 30 '11 at 6:54

You might want to give this strategy a try, Using Amazon EC2 Metadata as a Simple DNS.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.