Questions tagged [split-dns]
In computer networking, split-horizon DNS, split-view DNS, split-brain DNS, or split DNS is the facility of a Domain Name System (DNS) implementation to provide different sets of DNS information, selected by, usually, the source address of the DNS request.
58
questions
0
votes
1
answer
172
views
Configure Windows Server w/ multiple interfaces reply to DNS with subnets from specific interfaces?
Our windows server 2019 needs to respond to requests with IP addresses that are only on the interface subnets they are being quried from.
We have two DC's. Each has 3 interfaces. Each interface is its ...
- 209
0
votes
1
answer
98
views
Split DNS - private addresses for LAN, global addresses for Internet?
I think this question has been asked previously, but I can't seem to find the right answer. How do I set up split DNS on my Windows server, such that a particular FQDN should be server one of 2 types ...
- 162
0
votes
1
answer
867
views
How do you resolve to both public and private zones in a Split-Horizon DNS (using GCP Cloud DNS)?
We're using GCP and Cloud DNS to manage our domain and I'm trying to solve for these use cases:
Have private records for things like Databases that can only be resolved within the company network (...
google-cloud-platform
2
votes
1
answer
2k
views
DNS - Unbound - How to provide different IP for a server based on client network
We have an intranet DNS server using Unbound in FreeBSD. We have another file server with multiple network IP, First one is 10.10.10.10 and Second one in 192.168.10.10.
Is there any way that DNS ...
- 145
0
votes
0
answers
235
views
Is it possible to have different internal and public DNS with DNSSEC?
I'm attempting to achieve the following:
A public nameserver for my domain which points example.com to a public IP address.
A private nameserver for the same domain running within a LAN which instead ...
- 481
1
vote
0
answers
190
views
Why Firefox doesnt work with split DNS / Host Overrides?
I have configured Host overrides in pfSense and other browsers like Chrome and Edge work fine but Firefox simply does not resolve giving "Unable to connect" error.
This is the same on my ...
- 251
1
vote
1
answer
171
views
Proper behavior for a DNS Server when it is queried for a domain it doesn't control in the case of Split-Horizon DNS?
So one of our cloud providers offers a lower-latency, zero-rated "Internal Networking" option between VMs. The interfaces on the internal network are in the 10.x.x.x IP Space. When one of ...
4
votes
1
answer
1k
views
Windows DNS server: host a zone, but forward unknown entries
We have a split brain DNS scenario in our company where we have the same entries pointing towards different IPs.
Example1:
Internal DNS: email.company.net (A) 172.20.1.1
External DNS: email.company....
- 143
0
votes
1
answer
316
views
Azure Web App Internal/External Access - Split DNS
I recently deployed an Azure Web App and assigned custom domain and ssl cert. I added a CNAME DNS records to the external DNS registrar so now I can access the web app over the internet - webapp....
- 678
0
votes
1
answer
186
views
Split-Zone DNS Windows Server 2016 not responding to external dns queries
I am attempting to setup a split-brain dns in my active directory domain. In a nutshell, two of my servers have both external and internal IP's. When a DNS query is performed for them, both the ...
- 111
1
vote
0
answers
25
views
AD DNS update attempts from public IPs
Is there a way to only have DNS registration occur on truly internal networks? Maybe by leveraging the detection that windows firewall uses for domain interfaces?
As it sits we are regularly having ...
- 15.5k
4
votes
2
answers
2k
views
Can an authorative DNS server be configured to recurse when unable to find record locally?
Hopefully this is possible to do.
The question
Is it possible to configure a DNS server that is authorative for a given domain, to "fallback" and recurse via Forwarders / Root Hints when it cannot ...
- 175
0
votes
1
answer
242
views
GeoIP Split DNS Wrong 3rd View on Slave
Successfully configured Bind to host multiple views with TSIG with this guide. Problem is when I add a third view to the mix, things get weird.
On each server, I have 3 views right now:
USA
Europe
...
- 3
7
votes
5
answers
20k
views
Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?
Here's the setup:
Windows 10 1803 clients
Server 2012R2 RRAS server
Always On VPN device tunnel setup per these instructions, with split tunneling.
Device VPN only has routes to 1 DC/DNS server, and ...
- 17.8k
0
votes
2
answers
271
views
Bind9 Zone File for Single Machine?
Setup is two Active Directory servers with DNS replication across two sites. For 'legacy' purposes, I need to redirect queries for the previously lone file server to each site's respective copy. Eg, '...
- 21
3
votes
1
answer
3k
views
Can I use server 2016 DNS policies to return alternative IPs but only for some records in a domain?
I need to provide a kind of DNS split-brain scenario with two key goals:
"special" DNS clients (based on their subnet) must resolve certain A records in one domain to different IP addresses than the ...
- 153
0
votes
2
answers
265
views
Sending emails to external mail server having same mailbox as exchnage
I have an exchange server 2016 with some local mailboxes and also have same mailboxes on Rackspace ( test@example.com on both exchange and rackspace ). Currently the MX record is pointed to rackspace ...
- 111
0
votes
1
answer
144
views
Split horizon based on IP returned by upstream DNS
In a split horizon setup, I'd like to use a DNS server running in the local network, to resolve DNS queries to the local IP of a server. I know about the possibility to setup a DNS server in a way ...
- 4,133
4
votes
2
answers
3k
views
Split-DNS on Windows
I have an internal network in which all services are registered under a internal domain (e.g.: coolcorp.io).
When users connect to the VPN, I want them to be able to resolve the internal services in *...
- 175
0
votes
3
answers
3k
views
private IP reverse DNS on public Server - A bad idea?
This question somewhat relates to Another question but the other way around.
We use one domain with hostnames that resolve to public and hostnames that relsolve to private IPs. I agree to the answer ...
- 305
1
vote
2
answers
1k
views
How to change DNS resolution order with OpenVPN on Synology?
I have a Synology DSM which is configured to use VPN clint to connect to company intranet.
OpenVPN connection is stable but the DNS servers are not added to the top of the resolve list. Instead it ...
- 7,936
1
vote
0
answers
369
views
Split-dns based on subnet with windows server 2016
I have a question about split-dns in Windows Server 2016.
I've configured DNS in Windows Server 2016. It has three interfaces: 10.x.x.x, 192.x.x.x and 110.x.x.x.
I've tried to configure DNS so that ...
- 331
-1
votes
2
answers
114
views
Trying to Setup an internal dns
On my job's intranet we have internal applications that are not available in public for example: app1.example.com, app2.example.com whilst there is the example.com public facing website. Both app1....
10
votes
1
answer
3k
views
Are Windows 2016 DNS Policies / Split DNS possible on AD integrated zones with older DCs?
Windows Server 2016 supports DNS Policies, which provide support for split-brain DNS among other scenarios:
You can configure DNS policies to specify how a DNS server responds to
DNS queries. DNS ...
- 2,535
0
votes
1
answer
979
views
BIND: zone transfers with views configured not working
We use bind 9.8.2 on RHEL 6 servers. I have setup 2 test DNS servers using views. One is master one is slave. I have 2 views, one for "internal" and one for "external". Everything seems to work except ...
- 629
0
votes
1
answer
385
views
Win 2008 R2 @ records added to DNS
I have a small network with two DC's, each with a DNS server, and a single DHCP server. Both are running Windows Server 2008 R2 and standard Microsoft DNS services. Everything has been working fine ...
- 103
1
vote
1
answer
961
views
Split Horizon DNS via Active Directory?
Say we have an active directory domain corp.mycompany.com and a public DNS domain mycompany.com. Is it possible to create an AD integrated DNS zone for mycompany.com and only host records we need to ...
- 1,530
0
votes
2
answers
579
views
Split DNS Bind9 views match-client request IP
I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server.
Psuedo: If ...
1
vote
1
answer
1k
views
External domain not resolving internally (split DNS)
example.com is a registered domain name. Externally, there are nameservers associated with example.com which include an A record for subdomain.example.com which points to an externally hosted web page....
- 111
2
votes
2
answers
6k
views
PowerDNS Split Horizon Resolver
I've looked around the web for a solution and have found numerous threads with different suggestions. Most of which I've found has been using LUA on the resolver to return records. Other posts ...
- 219
0
votes
1
answer
295
views
bind9 with selective NS forwarding [closed]
I'm trying to setup a bind9 server which can provide DNS lookups for both internal and external IP's. I have access to an external name server which can provide IP details of external IP's and I have ...
- 101
1
vote
1
answer
2k
views
Access RDS internally with same domain name as externally
I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS server--...
- 43
1
vote
2
answers
524
views
Split horizon DNS with GoDaddy & Microtik routers
I'm looking into a simple split horizon DNS implementation. Using GoDaddy for my Internet DNS and Microtik routers for LAN DNS in a couple locations.
In my office I have a server, on the Internet is ...
- 2,105
0
votes
1
answer
697
views
How can I get bind to return the same dns answer as DNSMASQ returns?
As Dnsmasq does not support Views, I have installed and configured bind9. Everything works, however I am noticing on a specific entry that my bind server is not returning the same answer/response as ...
- 1,265
0
votes
2
answers
170
views
setting dns cache to give internal address responses to my domain requests for my externally accessible server
I'm having trouble trying to find anything on the internet explaining how to do this...
I'm running Ubuntu 14.04 with repository current Bind9
I have a authoritative DNS server hosting my domain and ...
- 111
0
votes
1
answer
379
views
Split-DNS with a zone being generated automatically
I want to run a DNS setup where the zones are managed on an internal Active Directory DNS server. There is a slave DNS server on the edge on the network which runs BIND (I am open to switching this, I ...
- 1,136
8
votes
3
answers
12k
views
Updates to a BIND dynamic zone that is shared between views delayed
Here's the quick and dirty: On BIND9 with a dynamic zone that's shared between views, doing a nsupdate, updating/creating/deleting a record will work fine if I query for that record from a client ...
2
votes
2
answers
3k
views
BIND9 DNS with external view inside the internal view
I'm planning a new BIND9 DNS Server with a special kind of view.
We a have a lot of external zones and public IPv4 addresses. To keep things simple we have a subzone of our external domain just for ...
- 5,480
23
votes
3
answers
11k
views
Naming a new Active Directory forest - why is split-horizon DNS not recommended?
Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence.
Use a subdomain of an existing,...
- 53.7k
2
votes
1
answer
177
views
Split DNS clarification
I need some clarification if I understood this correctly. I've been reading about Active Directory and naming my domain, and the reason Microsoft didn't suggest using external public domain was DNS ...
- 145
1
vote
1
answer
2k
views
How can I access a server on local network using its public name?
I have a problem in which I cannot access a server using its public name from the same network as the server. Access to the server works fine from the internet.
Reading up on this problem, I've ran ...
- 226
1
vote
0
answers
203
views
Bind9: Resolve internally then externally
My DNS is running in a split DNS scenario.
Both publically and internally we have the same domain. Lets call it test.com
When an internal user goes to test.com they get a different response to the ...
- 11
2
votes
1
answer
98
views
Is it safe to add parent domain as additional zone within DNS?
Our internal Windows domain is ad.company.co.uk.
When we try to access mail.company.co.uk (for OWA or Outlook Anywhere, as an example), it resolves to the external IP address of the router and gets ...
- 448
2
votes
1
answer
1k
views
Split DNS for a VPN site without a server
So here's my current setup:
Home:
RV220W
Office:
RV042
I have an IPSEC VPN running fine and dandy. Everything pings. I can manually nslookup to my dns servers over the VPN just fine.
Now, despite ...
- 123
0
votes
2
answers
2k
views
using one of 2 DNSs differentiated by requested domain
I'm using some sort of a dns-proxy service (the details aren't clear but as far as I understand it works by resolving the the domain into a cloud based proxy server and returning it's address whilst ...
- 13
3
votes
2
answers
2k
views
Split DNS - Cleanest solution for easy maintenance?
We have split DNS set up for our domain, which causes internal clients to resolve different DNS records from external clients.
As it is right now, the two zones are managed completely separately. For ...
- 747
0
votes
1
answer
1k
views
How to delegate a zone from Microsoft Windows 2003 DNS server to dnsmasq?
I have a split domain setup on my production server farm:
Each server has both an external (internet facing) IP address and a private internal (LAN facing) IP address. A local DNS server running ...
- 2,632
5
votes
2
answers
8k
views
Microsoft DNS: Provide different answers per-src-subnet to same query - do I need full split horizon/brain?
I have a network with two vlans, both of which refer to my AD server(s) for DNS. Some servers on this network are multi-homed.
Lets say we have the two subnets A: 192.168.7.0/24 and B: 192.168.5.0/24....
- 4,111
0
votes
1
answer
507
views
Internal DNS Server's Interactions with Local Client Computers... How do they work?
I'm setting up Split Horizon DNS. I have an internal DNS server, running Ubuntu Server 10.04. Everything has been set up properly as per this article's instructions. (I know that it is a mail server ...
- 419
1
vote
1
answer
963
views
How to setting up a local DNS server in LAN
I'm using BIND9 in Ubuntu to setup a local DNS that is shared by a LAN.
Here is what I want to achieve:
The BIND9 server and Apache server sits on 192.168.1.65 and currently the web server is ...
- 123