Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I run a few application clusters within a cloud-based host. We've grown to the point where I need some sort of internal DNS scheme to keep all of the servers straight. I'd like to run a server with BIND9 installed to solve this problem.

Right now, the internal team members VPN into the cloud and then connect on each respective server's private interface. I'd like to modify the VPN server to use this new BIND DNS server. How do I configure BIND so that I can provide internal entries for my servers, but also allow anyone who is connected via VPN to still access external sites such as google.com or serverfault.com?

All external DNS entries for my load balancers are handled offsite, so there is no need for the BIND server to provide any DNS capabilities to the outside world.

I will be using BIND on Ubuntu 10.04, so answers in the context of Debian are preferred (but I'll take what I can get).

Thanks, Greg

share|improve this question

2 Answers 2

up vote 1 down vote accepted

You need to set up bind to be the master DNS server for your 'cloud' zone and then have it forward other requests on to whichever DNS servers you currently use. Have a look at the Ubuntu Bind 9 documentation for the configuration specifics.

share|improve this answer
    
Thanks for the reply. I managed to get that far on my own, but I'm looking for advice from someone who has done this before to make sure I configure it properly. –  GregB Mar 29 '11 at 22:07
    
@GregB: I've done what you want to do. The article I linked to should help you get there. If you have any specific questions ask them on SF. That's what it's here for. –  Iain Mar 30 '11 at 6:54

You might want to give this strategy a try, Using Amazon EC2 Metadata as a Simple DNS.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.