2022 Developer Survey is open! Take survey.

Questions tagged [split-dns]

In computer networking, split-horizon DNS, split-view DNS, split-brain DNS, or split DNS is the facility of a Domain Name System (DNS) implementation to provide different sets of DNS information, selected by, usually, the source address of the DNS request.

Filter by
Sorted by
Tagged with
0 votes
1 answer
35 views

How do you resolve to both public and private zones in a Split-Horizon DNS (using GCP Cloud DNS)?

We're using GCP and Cloud DNS to manage our domain and I'm trying to solve for these use cases: Have private records for things like Databases that can only be resolved within the company network (...
user avatar
  • 101
0 votes
0 answers
13 views

how to implement edns client tagoption code

I've been searching for edns and found these documents. They mention something called client tag and server tag. Is there any way I can implent those tags? Here is my use case: Our product teams have ...
user avatar
2 votes
1 answer
102 views

DNS - Unbound - How to provide different IP for a server based on client network

We have an intranet DNS server using Unbound in FreeBSD. We have another file server with multiple network IP, First one is 10.10.10.10 and Second one in 192.168.10.10. Is there any way that DNS ...
user avatar
  • 143
0 votes
0 answers
38 views

Is it possible to have different internal and public DNS with DNSSEC?

I'm attempting to achieve the following: A public nameserver for my domain which points example.com to a public IP address. A private nameserver for the same domain running within a LAN which instead ...
user avatar
  • 461
1 vote
0 answers
42 views

Why Firefox doesnt work with split DNS / Host Overrides?

I have configured Host overrides in pfSense and other browsers like Chrome and Edge work fine but Firefox simply does not resolve giving "Unable to connect" error. This is the same on my ...
user avatar
  • 211
0 votes
0 answers
21 views

Internal Access to Published Services: Direct vs Bouncing Off Firewall

We have, as is common, two DNS infrastructures, one for internal resolution and another, non-forwarding, authoritative server for our public domains. This question is about the comparative merits of ...
user avatar
1 vote
1 answer
119 views

Proper behavior for a DNS Server when it is queried for a domain it doesn't control in the case of Split-Horizon DNS?

So one of our cloud providers offers a lower-latency, zero-rated "Internal Networking" option between VMs. The interfaces on the internal network are in the 10.x.x.x IP Space. When one of ...
user avatar
2 votes
1 answer
257 views

Windows DNS server: host a zone, but forward unknown entries

We have a split brain DNS scenario in our company where we have the same entries pointing towards different IPs. Example1: Internal DNS: email.company.net (A) 172.20.1.1 External DNS: email.company....
user avatar
0 votes
1 answer
209 views

Azure Web App Internal/External Access - Split DNS

I recently deployed an Azure Web App and assigned custom domain and ssl cert. I added a CNAME DNS records to the external DNS registrar so now I can access the web app over the internet - webapp....
user avatar
  • 578
0 votes
1 answer
122 views

Split-Zone DNS Windows Server 2016 not responding to external dns queries

I am attempting to setup a split-brain dns in my active directory domain. In a nutshell, two of my servers have both external and internal IP's. When a DNS query is performed for them, both the ...
user avatar
1 vote
0 answers
17 views

AD DNS update attempts from public IPs

Is there a way to only have DNS registration occur on truly internal networks? Maybe by leveraging the detection that windows firewall uses for domain interfaces? As it sits we are regularly having ...
user avatar
  • 15.4k
4 votes
2 answers
1k views

Can an authorative DNS server be configured to recurse when unable to find record locally?

Hopefully this is possible to do. The question Is it possible to configure a DNS server that is authorative for a given domain, to "fallback" and recurse via Forwarders / Root Hints when it cannot ...
user avatar
  • 173
0 votes
1 answer
182 views

GeoIP Split DNS Wrong 3rd View on Slave

Successfully configured Bind to host multiple views with TSIG with this guide. Problem is when I add a third view to the mix, things get weird. On each server, I have 3 views right now: USA Europe ...
user avatar
  • 3
6 votes
5 answers
18k views

Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?

Here's the setup: Windows 10 1803 clients Server 2012R2 RRAS server Always On VPN device tunnel setup per these instructions, with split tunneling. Device VPN only has routes to 1 DC/DNS server, and ...
user avatar
  • 17.1k
0 votes
2 answers
203 views

Bind9 Zone File for Single Machine?

Setup is two Active Directory servers with DNS replication across two sites. For 'legacy' purposes, I need to redirect queries for the previously lone file server to each site's respective copy. Eg, '...
user avatar
  • 21
3 votes
1 answer
3k views

Can I use server 2016 DNS policies to return alternative IPs but only for some records in a domain?

I need to provide a kind of DNS split-brain scenario with two key goals: "special" DNS clients (based on their subnet) must resolve certain A records in one domain to different IP addresses than the ...
user avatar
  • 53
0 votes
2 answers
178 views

Sending emails to external mail server having same mailbox as exchnage

I have an exchange server 2016 with some local mailboxes and also have same mailboxes on Rackspace ( test@example.com on both exchange and rackspace ). Currently the MX record is pointed to rackspace ...
user avatar
0 votes
1 answer
120 views

Split horizon based on IP returned by upstream DNS

In a split horizon setup, I'd like to use a DNS server running in the local network, to resolve DNS queries to the local IP of a server. I know about the possibility to setup a DNS server in a way ...
user avatar
  • 3,979
4 votes
2 answers
2k views

Split-DNS on Windows

I have an internal network in which all services are registered under a internal domain (e.g.: coolcorp.io). When users connect to the VPN, I want them to be able to resolve the internal services in *...
user avatar
0 votes
3 answers
3k views

private IP reverse DNS on public Server - A bad idea?

This question somewhat relates to Another question but the other way around. We use one domain with hostnames that resolve to public and hostnames that relsolve to private IPs. I agree to the answer ...
user avatar
1 vote
1 answer
1k views

How to change DNS resolution order with OpenVPN on Synology?

I have a Synology DSM which is configured to use VPN clint to connect to company intranet. OpenVPN connection is stable but the DNS servers are not added to the top of the resolve list. Instead it ...
user avatar
  • 7,468
1 vote
0 answers
357 views

Split-dns based on subnet with windows server 2016

I have a question about split-dns in Windows Server 2016. I've configured DNS in Windows Server 2016. It has three interfaces: 10.x.x.x, 192.x.x.x and 110.x.x.x. I've tried to configure DNS so that ...
user avatar
  • 301
-1 votes
2 answers
111 views

Trying to Setup an internal dns

On my job's intranet we have internal applications that are not available in public for example: app1.example.com, app2.example.com whilst there is the example.com public facing website. Both app1....
user avatar
10 votes
1 answer
3k views

Are Windows 2016 DNS Policies / Split DNS possible on AD integrated zones with older DCs?

Windows Server 2016 supports DNS Policies, which provide support for split-brain DNS among other scenarios: You can configure DNS policies to specify how a DNS server responds to DNS queries. DNS ...
user avatar
  • 2,505
0 votes
1 answer
897 views

BIND: zone transfers with views configured not working

We use bind 9.8.2 on RHEL 6 servers. I have setup 2 test DNS servers using views. One is master one is slave. I have 2 views, one for "internal" and one for "external". Everything seems to work except ...
user avatar
  • 609
0 votes
1 answer
352 views

Win 2008 R2 @ records added to DNS

I have a small network with two DC's, each with a DNS server, and a single DHCP server. Both are running Windows Server 2008 R2 and standard Microsoft DNS services. Everything has been working fine ...
user avatar
  • 103
1 vote
1 answer
834 views

Split Horizon DNS via Active Directory?

Say we have an active directory domain corp.mycompany.com and a public DNS domain mycompany.com. Is it possible to create an AD integrated DNS zone for mycompany.com and only host records we need to ...
user avatar
  • 1,530
0 votes
2 answers
457 views

Split DNS Bind9 views match-client request IP

I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server. Psuedo: If ...
user avatar
1 vote
1 answer
1k views

External domain not resolving internally (split DNS)

example.com is a registered domain name. Externally, there are nameservers associated with example.com which include an A record for subdomain.example.com which points to an externally hosted web page....
user avatar
1 vote
2 answers
5k views

PowerDNS Split Horizon Resolver

I've looked around the web for a solution and have found numerous threads with different suggestions. Most of which I've found has been using LUA on the resolver to return records. Other posts ...
user avatar
0 votes
1 answer
269 views

bind9 with selective NS forwarding [closed]

I'm trying to setup a bind9 server which can provide DNS lookups for both internal and external IP's. I have access to an external name server which can provide IP details of external IP's and I have ...
user avatar
1 vote
1 answer
1k views

Access RDS internally with same domain name as externally

I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS server--...
user avatar
  • 43
1 vote
2 answers
478 views

Split horizon DNS with GoDaddy & Microtik routers

I'm looking into a simple split horizon DNS implementation. Using GoDaddy for my Internet DNS and Microtik routers for LAN DNS in a couple locations. In my office I have a server, on the Internet is ...
user avatar
  • 1,975
0 votes
1 answer
629 views

How can I get bind to return the same dns answer as DNSMASQ returns?

As Dnsmasq does not support Views, I have installed and configured bind9. Everything works, however I am noticing on a specific entry that my bind server is not returning the same answer/response as ...
user avatar
  • 1,265
0 votes
2 answers
157 views

setting dns cache to give internal address responses to my domain requests for my externally accessible server

I'm having trouble trying to find anything on the internet explaining how to do this... I'm running Ubuntu 14.04 with repository current Bind9 I have a authoritative DNS server hosting my domain and ...
user avatar
0 votes
1 answer
340 views

Split-DNS with a zone being generated automatically

I want to run a DNS setup where the zones are managed on an internal Active Directory DNS server. There is a slave DNS server on the edge on the network which runs BIND (I am open to switching this, I ...
user avatar
  • 1,076
8 votes
2 answers
11k views

Updates to a BIND dynamic zone that is shared between views delayed

Here's the quick and dirty: On BIND9 with a dynamic zone that's shared between views, doing a nsupdate, updating/creating/deleting a record will work fine if I query for that record from a client ...
user avatar
2 votes
2 answers
3k views

BIND9 DNS with external view inside the internal view

I'm planning a new BIND9 DNS Server with a special kind of view. We a have a lot of external zones and public IPv4 addresses. To keep things simple we have a subzone of our external domain just for ...
user avatar
23 votes
3 answers
10k views

Naming a new Active Directory forest - why is split-horizon DNS not recommended?

Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence. Use a subdomain of an existing,...
user avatar
  • 53.2k
2 votes
1 answer
165 views

Split DNS clarification

I need some clarification if I understood this correctly. I've been reading about Active Directory and naming my domain, and the reason Microsoft didn't suggest using external public domain was DNS ...
user avatar
1 vote
1 answer
2k views

How can I access a server on local network using its public name?

I have a problem in which I cannot access a server using its public name from the same network as the server. Access to the server works fine from the internet. Reading up on this problem, I've ran ...
user avatar
  • 226
1 vote
0 answers
202 views

Bind9: Resolve internally then externally

My DNS is running in a split DNS scenario. Both publically and internally we have the same domain. Lets call it test.com When an internal user goes to test.com they get a different response to the ...
user avatar
  • 11
2 votes
1 answer
96 views

Is it safe to add parent domain as additional zone within DNS?

Our internal Windows domain is ad.company.co.uk. When we try to access mail.company.co.uk (for OWA or Outlook Anywhere, as an example), it resolves to the external IP address of the router and gets ...
user avatar
  • 448
2 votes
1 answer
1k views

Split DNS for a VPN site without a server

So here's my current setup: Home: RV220W Office: RV042 I have an IPSEC VPN running fine and dandy. Everything pings. I can manually nslookup to my dns servers over the VPN just fine. Now, despite ...
user avatar
  • 123
0 votes
2 answers
2k views

using one of 2 DNSs differentiated by requested domain

I'm using some sort of a dns-proxy service (the details aren't clear but as far as I understand it works by resolving the the domain into a cloud based proxy server and returning it's address whilst ...
user avatar
3 votes
2 answers
2k views

Split DNS - Cleanest solution for easy maintenance?

We have split DNS set up for our domain, which causes internal clients to resolve different DNS records from external clients. As it is right now, the two zones are managed completely separately. For ...
user avatar
0 votes
1 answer
1k views

How to delegate a zone from Microsoft Windows 2003 DNS server to dnsmasq?

I have a split domain setup on my production server farm: Each server has both an external (internet facing) IP address and a private internal (LAN facing) IP address. A local DNS server running ...
user avatar
  • 2,480
5 votes
2 answers
8k views

Microsoft DNS: Provide different answers per-src-subnet to same query - do I need full split horizon/brain?

I have a network with two vlans, both of which refer to my AD server(s) for DNS. Some servers on this network are multi-homed. Lets say we have the two subnets A: 192.168.7.0/24 and B: 192.168.5.0/24....
user avatar
  • 3,981
0 votes
1 answer
493 views

Internal DNS Server's Interactions with Local Client Computers... How do they work?

I'm setting up Split Horizon DNS. I have an internal DNS server, running Ubuntu Server 10.04. Everything has been set up properly as per this article's instructions. (I know that it is a mail server ...
user avatar
  • 389
1 vote
1 answer
881 views

How to setting up a local DNS server in LAN

I'm using BIND9 in Ubuntu to setup a local DNS that is shared by a LAN. Here is what I want to achieve: The BIND9 server and Apache server sits on 192.168.1.65 and currently the web server is ...
user avatar