At our company, we have a coloc at a local datacenter (where we host our public Web Servers) and a Site-to-Site VPN set up between the coloc and our office. We would like to join the servers at the datacenter to our Active Directory.
If I understand correctly, domain joining relies heavily on DNS. I would not like to have the servers at the datacenter resolve their DNS queries across the tunnel to our internal DNS server as this would decrease DNS query performance (and also in cases where the tunnel is down).
Is it possible to have the servers resolve all DNS queries using public DNS servers (Google's, ISP's, etc…) except the ones that are internal to our company? Instead these would be forwarded across the tunnel to our internal DNS Server? Would I need to host a DNS server at the coloc to achieve this functionality? Or is there a simpler way to do this?
After all, is this the correct solution of how I should join our coloc network to our Active Directory?