I have a local Forward Lookup Zone (Win Server 2003) for zxurian.com that has it's own A record, as well as a few subdomain records. I also use Route 53 for public DNS, and have a hosted zone there of "zxurian.com"

Is it possible to setup my local DNS to be first in the chain for computers behind it, but if a request for a subdomain isn't found locally, pass it to Route 53 for further lookup? I'd rather not copy every subdomain from Route 53 into my local DNS.

Ex. request for foo.zxurian.com

  • First stop is my local DNS ( -- not found
  • Forwards to Route 53. (aws56.awsdns-123.org) -- found, returns
  • foo.zxurian.com is no pointing to in local dns cache

Additional Information - Added 2015-01-22 13:02

Local authoritative server ( - public IP (

          Lookup Zones

           zxurian.com       (public web server)
      test.zxurian.com      (internaly hosted web server)

Route 53 Authoritative Server

           zxurian.com       (public web server)
      test.zxurian.com   (public address of internal web server)
  download.zxurian.com       (public web server)

So with that information, what I'm trying to ask/accomplish:

A computer outside the local network would always use Route 53, not an issue. On a computer inside the local network, a request to download.zxurian.com would first try the local server (since all local computers use the local server for DNS), but upon failing to find a matching record, it would then look to Route 53.

Would this happen by the local DNS passing the request to route 53, then passing the answer back to the client, or would the client then ask Route 53 directly, or would it happen at all?

  • AFAIK, there isn't any way to do this with Windows DNS. – joeqwerty Jan 22 '15 at 15:23

Yes, you can have the local name server configured as authoritative for a local domain like zxurian.local. or local.zxurian.com. (as well as the 0.168.192.in-addr.arpa. zone for PTR records) and have it do recursive lookups for all other domains.

You'll also benefit from having a local caching server.

There are several how-to documents for BIND9 (like this one for Ubuntu). I'm assuming in the Windows universe it is no more difficult.

  • Actually the question is about sub domains. – NaeiKinDus Jan 22 '15 at 16:09
  • With the exception of the root domain, all domains are subdomains. The important thing is that a local service can be configured to be both an authoritative and a recursive service. – Mark Rogaski Jan 22 '15 at 16:31
  • Well, TBH I'll reconsider that. On my side I understood subdomain records for the zxurioan.com zone itself. And that case, I believe your answer would be out of scope. If I misunderstood the question (which is possible), and it was about other domains, then you are on spot. – NaeiKinDus Jan 22 '15 at 16:39
  • added additional information, since I may not have explained it correctly. If using a local caching server, which I would assume caches the dns records of the web itself from it's own dns lookups, would it add the subdomain records to it's own listings, and if thats the case, does it handle conflicts gracefully? – Zxurian Jan 22 '15 at 18:08
  • 1
    Whether the local service gets the download.zxurian.com record for the client or refers the client to Route 53's service depends on whether the local service is configured to be recursive. – Mark Rogaski Jan 22 '15 at 19:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.