Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a public domain, say The DNS records are stored somewhere in the cloud. However, on my Windows Server 2008 DNS servers, I want to add some internal subdomains such as

When my internal DNS server receives a request for, I want it to use the record I've created, but when it receives a request for other records such as and, for which I have not locally created records, I want it to forward those on to an external DNS server for lookup.

I know there is a very ugly way to do this by creating a new primary dns zone for each subdomain, but that really clutters up my forward lookup zones very quickly (I'd easily have over 200 entries).

I also know that I can create a primary zone for, and manually specify every single entry (this is what we do today), but that requires double work (once on the public dns, once on the internal) and is "fragile" since changes to the external dns entries don't automatically update the internal records.

Is is possible to perform this partial domain forwarding?

share|improve this question
You've answered your own question - I know there is a very ugly way to do this by creating a new primary dns zone for each subdomain – joeqwerty Mar 26 '14 at 15:34
up vote 0 down vote accepted

I think the "ugly" way of creating primary DNS zones is the only way to achieve this. We do this internally as well, and I'm not aware of any other approach.

share|improve this answer

The only workaround you haven't already mentioned in your OP would be to simply put the records into your public DNS with private IPs.

See here: Private IP address in public DNS for a detailed discussion on pros/cons of doing so, but it is doable.

share|improve this answer
Thanks. I like the idea of only needing to update one place, although having to wait for DNS propagation may not be acceptable form a developer perspective... I'll definitely give this some thought. – Nathan Reid Mar 27 '14 at 16:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.