Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So, here's the scenario:

In our environment (Windows 2003 domain) we have a host X in production and X's twin in DR (call it Y). In the current version there is a CNAME abc that points to X. Problem is, what I really want is that Prod-site hosts resolve abc to X and DR-site hosts resolve abc to Y.

They are separate sites in AD but it's one domain. This is not a web server so we can't use gimmicks like http-redirect.

Any ideas?

share|improve this question
up vote 2 down vote accepted

Netmask ordering (which is enabled by default) should accomplish the objective, if you use A records rather than CNAME records.

share|improve this answer
This is a much better solution, as long as the application using the server obeys the ordering that the DNS server replies with. See here if you need to tweak the mask length that constitutes 'proximity'. – Shane Madden Jan 25 '12 at 4:00
Since none of the A records is actually the primary address, I should make sure no PTR record matches these since they are effectively aliases, right? @ShaneMadden's link is excellent since my next question was what constitutes proximity in this context. – Vincent Magnotta Jan 25 '12 at 6:45
@VincentMagnotta PTR records shouldn't be an issue, unless your application checks them for some crazy reason. Feel free to make the PTR record for every address match the A record's name. – Shane Madden Jan 25 '12 at 6:47
PTR records aren't required for AD and I've yet to see an application that uses them so they shouldn't be an issue. – joeqwerty Jan 25 '12 at 11:42

You can accomplish this by, basically, cheating a bit to create different perspective of DNS for different systems.

I'm going to assume that you have a DC in both sites, since you've got different AD sites for them. What you'll also need to do, if you haven't already, is to make sure that every system in each site is pointing to a DC in its own site.

Once that's done, create a zone on every DC for the DR record - but don't create it as AD-integrated. Say you're looking to make resolve to the local copy - make it a CNAME in the AD integrated zone, pointing to the standalone zone; say,

Records in that zone can and will be different between the sites, since they're not replicating. Have it resolve to server X in site X and server Y in site Y, and you've got the resolution topology you're looking for.

..Or just set up BIND with a split view.

share|improve this answer
Doesn't netmask ordering (which is enabled by default) accomplish the objective, albeit with A records rather than CNAME records? – joeqwerty Jan 25 '12 at 3:27
Oh, yes - absolutely a better solution. Had completely forgotten! – Shane Madden Jan 25 '12 at 3:39
Then I'll add it as an answer. – joeqwerty Jan 25 '12 at 3:48

I'm not Windows/AD guy but this seems like a job for

share|improve this answer
Thanks. At least as of 2003, Windows DNS doesn't support split horizon. Also, somewhat overkill within one small domain. – Vincent Magnotta Jan 25 '12 at 1:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.