Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Normally, EC2 public DNS names will resolve to internal IPs from within an EC2 region. However from one EC2 instance, we're seeing these always resolve to public IPs. We have confirmed that it is using the same amazon nameserver as other instances:

This is what we're seeing:

ubuntu@ip-10-203-XXX-XXX:~$ dig A

; <<>> DiG 9.8.1-P1 <<>> A
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44851
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

; IN A

;; ANSWER SECTION: 603721 IN A 184.73.XXX.XXX

;; Query time: 0 msec
;; WHEN: Fri Jun  7 17:45:58 2013
;; MSG SIZE  rcvd: 76

Why would this not be resolving to the internal IP?

share|improve this question
Isn't it because your instance is in a VPC? – Céline Aussourd Aug 21 '13 at 16:20
@CélineAussourd Nope, not in a VPC. – btucker Aug 22 '13 at 18:23

It's obviously been a long time since this happened, so it may not be an issue anymore, but there are a couple details in your dig output that suggest some possibilities.

The long TTL clearly comes from the external DNS view. When you see this working properly, the TTL is 60 seconds. So that's definitely unexpected. The very fast query response indicates that the answer was cached, and that the resolver didn't need to perform a recursive lookup in order to serve your answer.

It's very possible that, once the TTL decrements to zero and the cache expires, that the next query will resolve correctly.

In general, this sort of issue would be good to report to AWS support on

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.