Skip to main content

Questions tagged [split-dns]

In computer networking, split-horizon DNS, split-view DNS, split-brain DNS, or split DNS is the facility of a Domain Name System (DNS) implementation to provide different sets of DNS information, selected by, usually, the source address of the DNS request.

Filter by
Sorted by
Tagged with
0 votes
1 answer
187 views

Public DNS for a domain on Route 53 and would like to use Azure Private DNS for internal resolution

We are in the process of migrating on premises / datacenter service from colocation to Microsoft Azure. We have several domains, let's call one myapp.com. The myapp.com web server is available to the ...
S.Giacinto's user avatar
0 votes
1 answer
332 views

OpenVPN AS split tunneling with "whitelisted" domains

got a requirement to enable split tunneling for our work openVPN as server's This also includes having a "split DNS" configuration where some internal/public company domains traffic should ...
Eyal Solomon's user avatar
0 votes
1 answer
1k views

Configure Windows Server w/ multiple interfaces reply to DNS with subnets from specific interfaces?

Our windows server 2019 needs to respond to requests with IP addresses that are only on the interface subnets they are being quried from. We have two DC's. Each has 3 interfaces. Each interface is its ...
Dave's user avatar
  • 376
0 votes
1 answer
333 views

Split DNS - private addresses for LAN, global addresses for Internet?

I think this question has been asked previously, but I can't seem to find the right answer. How do I set up split DNS on my Windows server, such that a particular FQDN should be server one of 2 types ...
stealthmode's user avatar
0 votes
2 answers
2k views

How do you resolve to both public and private zones in a Split-Horizon DNS (using GCP Cloud DNS)?

We're using GCP and Cloud DNS to manage our domain and I'm trying to solve for these use cases: Have private records for things like Databases that can only be resolved within the company network (...
James's user avatar
  • 103
3 votes
1 answer
4k views

DNS - Unbound - How to provide different IP for a server based on client network

We have an intranet DNS server using Unbound in FreeBSD. We have another file server with multiple network IP, First one is 10.10.10.10 and Second one in 192.168.10.10. Is there any way that DNS ...
iamsumesh's user avatar
  • 155
0 votes
0 answers
389 views

Is it possible to have different internal and public DNS with DNSSEC?

I'm attempting to achieve the following: A public nameserver for my domain which points example.com to a public IP address. A private nameserver for the same domain running within a LAN which instead ...
Ellis's user avatar
  • 471
1 vote
0 answers
311 views

Why Firefox doesnt work with split DNS / Host Overrides?

I have configured Host overrides in pfSense and other browsers like Chrome and Edge work fine but Firefox simply does not resolve giving "Unable to connect" error. This is the same on my ...
DominicM's user avatar
  • 251
1 vote
1 answer
207 views

Proper behavior for a DNS Server when it is queried for a domain it doesn't control in the case of Split-Horizon DNS?

So one of our cloud providers offers a lower-latency, zero-rated "Internal Networking" option between VMs. The interfaces on the internal network are in the 10.x.x.x IP Space. When one of ...
Jonathan S. Fisher's user avatar
4 votes
1 answer
3k views

Windows DNS server: host a zone, but forward unknown entries

We have a split brain DNS scenario in our company where we have the same entries pointing towards different IPs. Example1: Internal DNS: email.company.net (A) 172.20.1.1 External DNS: email.company....
Mario Jost's user avatar
0 votes
1 answer
511 views

Azure Web App Internal/External Access - Split DNS

I recently deployed an Azure Web App and assigned custom domain and ssl cert. I added a CNAME DNS records to the external DNS registrar so now I can access the web app over the internet - webapp....
jrd1989's user avatar
  • 688
0 votes
1 answer
214 views

Split-Zone DNS Windows Server 2016 not responding to external dns queries

I am attempting to setup a split-brain dns in my active directory domain. In a nutshell, two of my servers have both external and internal IP's. When a DNS query is performed for them, both the ...
zandermar18's user avatar
1 vote
0 answers
38 views

AD DNS update attempts from public IPs

Is there a way to only have DNS registration occur on truly internal networks? Maybe by leveraging the detection that windows firewall uses for domain interfaces? As it sits we are regularly having ...
Tim Brigham's user avatar
  • 15.6k
4 votes
3 answers
2k views

Can an authorative DNS server be configured to recurse when unable to find record locally?

Hopefully this is possible to do. The question Is it possible to configure a DNS server that is authorative for a given domain, to "fallback" and recurse via Forwarders / Root Hints when it cannot ...
Jaans's user avatar
  • 175
0 votes
1 answer
309 views

GeoIP Split DNS Wrong 3rd View on Slave

Successfully configured Bind to host multiple views with TSIG with this guide. Problem is when I add a third view to the mix, things get weird. On each server, I have 3 views right now: USA Europe ...
emdk's user avatar
  • 3
7 votes
5 answers
22k views

Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?

Here's the setup: Windows 10 1803 clients Server 2012R2 RRAS server Always On VPN device tunnel setup per these instructions, with split tunneling. Device VPN only has routes to 1 DC/DNS server, and ...
Grant's user avatar
  • 18k
0 votes
2 answers
329 views

Bind9 Zone File for Single Machine?

Setup is two Active Directory servers with DNS replication across two sites. For 'legacy' purposes, I need to redirect queries for the previously lone file server to each site's respective copy. Eg, '...
canut's user avatar
  • 21
4 votes
1 answer
3k views

Can I use server 2016 DNS policies to return alternative IPs but only for some records in a domain?

I need to provide a kind of DNS split-brain scenario with two key goals: "special" DNS clients (based on their subnet) must resolve certain A records in one domain to different IP addresses than the ...
StepCZ's user avatar
  • 163
0 votes
2 answers
351 views

Sending emails to external mail server having same mailbox as exchnage

I have an exchange server 2016 with some local mailboxes and also have same mailboxes on Rackspace ( [email protected] on both exchange and rackspace ). Currently the MX record is pointed to rackspace ...
Akhil krishna A's user avatar
0 votes
1 answer
189 views

Split horizon based on IP returned by upstream DNS

In a split horizon setup, I'd like to use a DNS server running in the local network, to resolve DNS queries to the local IP of a server. I know about the possibility to setup a DNS server in a way ...
Zulakis's user avatar
  • 4,335
4 votes
2 answers
3k views

Split-DNS on Windows

I have an internal network in which all services are registered under a internal domain (e.g.: coolcorp.io). When users connect to the VPN, I want them to be able to resolve the internal services in *...
greenboxal's user avatar
1 vote
3 answers
4k views

private IP reverse DNS on public Server - A bad idea?

This question somewhat relates to Another question but the other way around. We use one domain with hostnames that resolve to public and hostnames that relsolve to private IPs. I agree to the answer ...
Clemens Bergmann's user avatar
1 vote
2 answers
1k views

How to change DNS resolution order with OpenVPN on Synology?

I have a Synology DSM which is configured to use VPN clint to connect to company intranet. OpenVPN connection is stable but the DNS servers are not added to the top of the resolve list. Instead it ...
sorin's user avatar
  • 8,266
1 vote
0 answers
400 views

Split-dns based on subnet with windows server 2016

I have a question about split-dns in Windows Server 2016. I've configured DNS in Windows Server 2016. It has three interfaces: 10.x.x.x, 192.x.x.x and 110.x.x.x. I've tried to configure DNS so that ...
jask's user avatar
  • 351
-1 votes
2 answers
125 views

Trying to Setup an internal dns

On my job's intranet we have internal applications that are not available in public for example: app1.example.com, app2.example.com whilst there is the example.com public facing website. Both app1....
Dimitrios Desyllas's user avatar
10 votes
1 answer
3k views

Are Windows 2016 DNS Policies / Split DNS possible on AD integrated zones with older DCs?

Windows Server 2016 supports DNS Policies, which provide support for split-brain DNS among other scenarios: You can configure DNS policies to specify how a DNS server responds to DNS queries. DNS ...
briantist's user avatar
  • 2,565
0 votes
1 answer
1k views

BIND: zone transfers with views configured not working

We use bind 9.8.2 on RHEL 6 servers. I have setup 2 test DNS servers using views. One is master one is slave. I have 2 views, one for "internal" and one for "external". Everything seems to work except ...
user53029's user avatar
  • 649
0 votes
1 answer
412 views

Win 2008 R2 @ records added to DNS

I have a small network with two DC's, each with a DNS server, and a single DHCP server. Both are running Windows Server 2008 R2 and standard Microsoft DNS services. Everything has been working fine ...
LeeG's user avatar
  • 103
1 vote
1 answer
1k views

Split Horizon DNS via Active Directory?

Say we have an active directory domain corp.mycompany.com and a public DNS domain mycompany.com. Is it possible to create an AD integrated DNS zone for mycompany.com and only host records we need to ...
floyd's user avatar
  • 1,530
0 votes
2 answers
686 views

Split DNS Bind9 views match-client request IP

I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server. Psuedo: If ...
shinercoder's user avatar
1 vote
1 answer
1k views

External domain not resolving internally (split DNS)

example.com is a registered domain name. Externally, there are nameservers associated with example.com which include an A record for subdomain.example.com which points to an externally hosted web page....
Chris Evans's user avatar
2 votes
2 answers
7k views

PowerDNS Split Horizon Resolver

I've looked around the web for a solution and have found numerous threads with different suggestions. Most of which I've found has been using LUA on the resolver to return records. Other posts ...
Michael Moser's user avatar
0 votes
1 answer
325 views

bind9 with selective NS forwarding [closed]

I'm trying to setup a bind9 server which can provide DNS lookups for both internal and external IP's. I have access to an external name server which can provide IP details of external IP's and I have ...
user3229731's user avatar
1 vote
1 answer
2k views

Access RDS internally with same domain name as externally

I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS server--...
Ron Lee's user avatar
  • 43
1 vote
2 answers
571 views

Split horizon DNS with GoDaddy & Microtik routers

I'm looking into a simple split horizon DNS implementation. Using GoDaddy for my Internet DNS and Microtik routers for LAN DNS in a couple locations. In my office I have a server, on the Internet is ...
quickshiftin's user avatar
  • 2,195
0 votes
1 answer
737 views

How can I get bind to return the same dns answer as DNSMASQ returns?

As Dnsmasq does not support Views, I have installed and configured bind9. Everything works, however I am noticing on a specific entry that my bind server is not returning the same answer/response as ...
Kladskull's user avatar
  • 1,275
0 votes
2 answers
194 views

setting dns cache to give internal address responses to my domain requests for my externally accessible server

I'm having trouble trying to find anything on the internet explaining how to do this... I'm running Ubuntu 14.04 with repository current Bind9 I have a authoritative DNS server hosting my domain and ...
RandomOzzy's user avatar
0 votes
1 answer
450 views

Split-DNS with a zone being generated automatically

I want to run a DNS setup where the zones are managed on an internal Active Directory DNS server. There is a slave DNS server on the edge on the network which runs BIND (I am open to switching this, I ...
jornane's user avatar
  • 1,246
8 votes
3 answers
13k views

Updates to a BIND dynamic zone that is shared between views delayed

Here's the quick and dirty: On BIND9 with a dynamic zone that's shared between views, doing a nsupdate, updating/creating/deleting a record will work fine if I query for that record from a client ...
enragedSquirrel's user avatar
2 votes
2 answers
3k views

BIND9 DNS with external view inside the internal view

I'm planning a new BIND9 DNS Server with a special kind of view. We a have a lot of external zones and public IPv4 addresses. To keep things simple we have a subzone of our external domain just for ...
Vinícius Ferrão's user avatar
23 votes
3 answers
11k views

Naming a new Active Directory forest - why is split-horizon DNS not recommended?

Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence. Use a subdomain of an existing,...
HopelessN00b's user avatar
2 votes
1 answer
183 views

Split DNS clarification

I need some clarification if I understood this correctly. I've been reading about Active Directory and naming my domain, and the reason Microsoft didn't suggest using external public domain was DNS ...
RidableCthulu's user avatar
1 vote
1 answer
3k views

How can I access a server on local network using its public name?

I have a problem in which I cannot access a server using its public name from the same network as the server. Access to the server works fine from the internet. Reading up on this problem, I've ran ...
JYelton's user avatar
  • 224
1 vote
0 answers
232 views

Bind9: Resolve internally then externally

My DNS is running in a split DNS scenario. Both publically and internally we have the same domain. Lets call it test.com When an internal user goes to test.com they get a different response to the ...
Matthew's user avatar
  • 11
2 votes
1 answer
126 views

Is it safe to add parent domain as additional zone within DNS?

Our internal Windows domain is ad.company.co.uk. When we try to access mail.company.co.uk (for OWA or Outlook Anywhere, as an example), it resolves to the external IP address of the router and gets ...
Kez's user avatar
  • 438
2 votes
1 answer
1k views

Split DNS for a VPN site without a server

So here's my current setup: Home: RV220W Office: RV042 I have an IPSEC VPN running fine and dandy. Everything pings. I can manually nslookup to my dns servers over the VPN just fine. Now, despite ...
ShortFuse's user avatar
  • 123
0 votes
2 answers
2k views

using one of 2 DNSs differentiated by requested domain

I'm using some sort of a dns-proxy service (the details aren't clear but as far as I understand it works by resolving the the domain into a cloud based proxy server and returning it's address whilst ...
ubuntu_noob's user avatar
3 votes
2 answers
2k views

Split DNS - Cleanest solution for easy maintenance?

We have split DNS set up for our domain, which causes internal clients to resolve different DNS records from external clients. As it is right now, the two zones are managed completely separately. For ...
Moduspwnens's user avatar
0 votes
1 answer
1k views

How to delegate a zone from Microsoft Windows 2003 DNS server to dnsmasq?

I have a split domain setup on my production server farm: Each server has both an external (internet facing) IP address and a private internal (LAN facing) IP address. A local DNS server running ...
Guss's user avatar
  • 2,850
5 votes
2 answers
9k views

Microsoft DNS: Provide different answers per-src-subnet to same query - do I need full split horizon/brain?

I have a network with two vlans, both of which refer to my AD server(s) for DNS. Some servers on this network are multi-homed. Lets say we have the two subnets A: 192.168.7.0/24 and B: 192.168.5.0/24....
Tom Newton's user avatar
  • 4,201