Questions tagged [split-dns]
In computer networking, split-horizon DNS, split-view DNS, split-brain DNS, or split DNS is the facility of a Domain Name System (DNS) implementation to provide different sets of DNS information, selected by, usually, the source address of the DNS request.
60
questions
0
votes
1
answer
90
views
Public DNS for a domain on Route 53 and would like to use Azure Private DNS for internal resolution
We are in the process of migrating on premises / datacenter service from colocation to Microsoft Azure. We have several domains, let's call one myapp.com. The myapp.com web server is available to the ...
- 2,594
4
votes
3
answers
2k
views
Can an authorative DNS server be configured to recurse when unable to find record locally?
Hopefully this is possible to do.
The question
Is it possible to configure a DNS server that is authorative for a given domain, to "fallback" and recurse via Forwarders / Root Hints when it cannot ...
- 11
0
votes
1
answer
268
views
OpenVPN AS split tunneling with "whitelisted" domains
got a requirement to enable split tunneling for our work openVPN as server's
This also includes having a "split DNS" configuration where some internal/public company domains traffic should ...
- 2,449
0
votes
2
answers
2k
views
How do you resolve to both public and private zones in a Split-Horizon DNS (using GCP Cloud DNS)?
We're using GCP and Cloud DNS to manage our domain and I'm trying to solve for these use cases:
Have private records for things like Databases that can only be resolved within the company network (...
google-cloud-platform
8
votes
3
answers
12k
views
Updates to a BIND dynamic zone that is shared between views delayed
Here's the quick and dirty: On BIND9 with a dynamic zone that's shared between views, doing a nsupdate, updating/creating/deleting a record will work fine if I query for that record from a client ...
- 369
0
votes
1
answer
874
views
Configure Windows Server w/ multiple interfaces reply to DNS with subnets from specific interfaces?
Our windows server 2019 needs to respond to requests with IP addresses that are only on the interface subnets they are being quried from.
We have two DC's. Each has 3 interfaces. Each interface is its ...
- 336
4
votes
1
answer
2k
views
Windows DNS server: host a zone, but forward unknown entries
We have a split brain DNS scenario in our company where we have the same entries pointing towards different IPs.
Example1:
Internal DNS: email.company.net (A) 172.20.1.1
External DNS: email.company....
- 71.3k
0
votes
1
answer
268
views
Split DNS - private addresses for LAN, global addresses for Internet?
I think this question has been asked previously, but I can't seem to find the right answer. How do I set up split DNS on my Windows server, such that a particular FQDN should be server one of 2 types ...
- 11.7k
1
vote
2
answers
1k
views
How to change DNS resolution order with OpenVPN on Synology?
I have a Synology DSM which is configured to use VPN clint to connect to company intranet.
OpenVPN connection is stable but the DNS servers are not added to the top of the resolve list. Instead it ...
- 1
2
votes
1
answer
4k
views
DNS - Unbound - How to provide different IP for a server based on client network
We have an intranet DNS server using Unbound in FreeBSD. We have another file server with multiple network IP, First one is 10.10.10.10 and Second one in 192.168.10.10.
Is there any way that DNS ...
- 1,193
0
votes
0
answers
352
views
Is it possible to have different internal and public DNS with DNSSEC?
I'm attempting to achieve the following:
A public nameserver for my domain which points example.com to a public IP address.
A private nameserver for the same domain running within a LAN which instead ...
- 481
1
vote
0
answers
291
views
Why Firefox doesnt work with split DNS / Host Overrides?
I have configured Host overrides in pfSense and other browsers like Chrome and Edge work fine but Firefox simply does not resolve giving "Unable to connect" error.
This is the same on my ...
- 251
2
votes
2
answers
7k
views
PowerDNS Split Horizon Resolver
I've looked around the web for a solution and have found numerous threads with different suggestions. Most of which I've found has been using LUA on the resolver to return records. Other posts ...
- 171
2
votes
1
answer
183
views
Split DNS clarification
I need some clarification if I understood this correctly. I've been reading about Active Directory and naming my domain, and the reason Microsoft didn't suggest using external public domain was DNS ...
- 49.8k
1
vote
1
answer
203
views
Proper behavior for a DNS Server when it is queried for a domain it doesn't control in the case of Split-Horizon DNS?
So one of our cloud providers offers a lower-latency, zero-rated "Internal Networking" option between VMs. The interfaces on the internal network are in the 10.x.x.x IP Space. When one of ...
- 49.8k
0
votes
1
answer
455
views
Azure Web App Internal/External Access - Split DNS
I recently deployed an Azure Web App and assigned custom domain and ssl cert. I added a CNAME DNS records to the external DNS registrar so now I can access the web app over the internet - webapp....
- 39k
3
votes
1
answer
3k
views
Can I use server 2016 DNS policies to return alternative IPs but only for some records in a domain?
I need to provide a kind of DNS split-brain scenario with two key goals:
"special" DNS clients (based on their subnet) must resolve certain A records in one domain to different IP addresses than the ...
7
votes
5
answers
22k
views
Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?
Here's the setup:
Windows 10 1803 clients
Server 2012R2 RRAS server
Always On VPN device tunnel setup per these instructions, with split tunneling.
Device VPN only has routes to 1 DC/DNS server, and ...
0
votes
1
answer
208
views
Split-Zone DNS Windows Server 2016 not responding to external dns queries
I am attempting to setup a split-brain dns in my active directory domain. In a nutshell, two of my servers have both external and internal IP's. When a DNS query is performed for them, both the ...
- 111
1
vote
0
answers
35
views
AD DNS update attempts from public IPs
Is there a way to only have DNS registration occur on truly internal networks? Maybe by leveraging the detection that windows firewall uses for domain interfaces?
As it sits we are regularly having ...
- 15.6k
0
votes
2
answers
320
views
Bind9 Zone File for Single Machine?
Setup is two Active Directory servers with DNS replication across two sites. For 'legacy' purposes, I need to redirect queries for the previously lone file server to each site's respective copy. Eg, '...
- 21
0
votes
1
answer
299
views
GeoIP Split DNS Wrong 3rd View on Slave
Successfully configured Bind to host multiple views with TSIG with this guide. Problem is when I add a third view to the mix, things get weird.
On each server, I have 3 views right now:
USA
Europe
...
- 35.5k
0
votes
2
answers
655
views
Split DNS Bind9 views match-client request IP
I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server.
Psuedo: If ...
- 3,553
0
votes
2
answers
323
views
Sending emails to external mail server having same mailbox as exchnage
I have an exchange server 2016 with some local mailboxes and also have same mailboxes on Rackspace ( [email protected] on both exchange and rackspace ). Currently the MX record is pointed to rackspace ...
- 46
0
votes
1
answer
180
views
Split horizon based on IP returned by upstream DNS
In a split horizon setup, I'd like to use a DNS server running in the local network, to resolve DNS queries to the local IP of a server. I know about the possibility to setup a DNS server in a way ...
- 157
1
vote
3
answers
4k
views
private IP reverse DNS on public Server - A bad idea?
This question somewhat relates to Another question but the other way around.
We use one domain with hostnames that resolve to public and hostnames that relsolve to private IPs. I agree to the answer ...
- 225
4
votes
2
answers
3k
views
Split-DNS on Windows
I have an internal network in which all services are registered under a internal domain (e.g.: coolcorp.io).
When users connect to the VPN, I want them to be able to resolve the internal services in *...
0
votes
1
answer
1k
views
BIND: zone transfers with views configured not working
We use bind 9.8.2 on RHEL 6 servers. I have setup 2 test DNS servers using views. One is master one is slave. I have 2 views, one for "internal" and one for "external". Everything seems to work except ...
- 8,006
10
votes
1
answer
3k
views
Are Windows 2016 DNS Policies / Split DNS possible on AD integrated zones with older DCs?
Windows Server 2016 supports DNS Policies, which provide support for split-brain DNS among other scenarios:
You can configure DNS policies to specify how a DNS server responds to
DNS queries. DNS ...
- 2,555
1
vote
0
answers
388
views
Split-dns based on subnet with windows server 2016
I have a question about split-dns in Windows Server 2016.
I've configured DNS in Windows Server 2016. It has three interfaces: 10.x.x.x, 192.x.x.x and 110.x.x.x.
I've tried to configure DNS so that ...
- 341
-1
votes
2
answers
125
views
Trying to Setup an internal dns
On my job's intranet we have internal applications that are not available in public for example: app1.example.com, app2.example.com whilst there is the example.com public facing website. Both app1....
- 437
8
votes
4
answers
8k
views
Zone transfers on a split-view Bind DNS system
I have a 2-server BIND 9 setup. Server A (the 'master' server) is properly setup with two views, one for local DNS clients (allowing recursive lookups for non-authorotive domains) and one view for the ...
- 61
0
votes
1
answer
406
views
Win 2008 R2 @ records added to DNS
I have a small network with two DC's, each with a DNS server, and a single DHCP server. Both are running Windows Server 2008 R2 and standard Microsoft DNS services. Everything has been working fine ...
- 111k
1
vote
1
answer
1k
views
Split Horizon DNS via Active Directory?
Say we have an active directory domain corp.mycompany.com and a public DNS domain mycompany.com. Is it possible to create an AD integrated DNS zone for mycompany.com and only host records we need to ...
- 115k
1
vote
1
answer
1k
views
External domain not resolving internally (split DNS)
example.com is a registered domain name. Externally, there are nameservers associated with example.com which include an A record for subdomain.example.com which points to an externally hosted web page....
- 628
0
votes
1
answer
316
views
bind9 with selective NS forwarding [closed]
I'm trying to setup a bind9 server which can provide DNS lookups for both internal and external IP's. I have access to an external name server which can provide IP details of external IP's and I have ...
- 785
1
vote
1
answer
2k
views
Access RDS internally with same domain name as externally
I have a network setup with a 2008 R2 AD domain called internal.domain.org. Our externally hosted website uses www.domain.org and domain.org. I'd like users to be able to access our RDS server--...
- 43
1
vote
2
answers
562
views
Split horizon DNS with GoDaddy & Microtik routers
I'm looking into a simple split horizon DNS implementation. Using GoDaddy for my Internet DNS and Microtik routers for LAN DNS in a couple locations.
In my office I have a server, on the Internet is ...
- 2,185
0
votes
1
answer
735
views
How can I get bind to return the same dns answer as DNSMASQ returns?
As Dnsmasq does not support Views, I have installed and configured bind9. Everything works, however I am noticing on a specific entry that my bind server is not returning the same answer/response as ...
- 2,213
0
votes
2
answers
186
views
setting dns cache to give internal address responses to my domain requests for my externally accessible server
I'm having trouble trying to find anything on the internet explaining how to do this...
I'm running Ubuntu 14.04 with repository current Bind9
I have a authoritative DNS server hosting my domain and ...
- 993
0
votes
1
answer
431
views
Split-DNS with a zone being generated automatically
I want to run a DNS setup where the zones are managed on an internal Active Directory DNS server. There is a slave DNS server on the edge on the network which runs BIND (I am open to switching this, I ...
- 1,226
2
votes
2
answers
3k
views
BIND9 DNS with external view inside the internal view
I'm planning a new BIND9 DNS Server with a special kind of view.
We a have a lot of external zones and public IPv4 addresses. To keep things simple we have a subzone of our external domain just for ...
- 8,936
23
votes
3
answers
11k
views
Naming a new Active Directory forest - why is split-horizon DNS not recommended?
Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence.
Use a subdomain of an existing,...
CommunityBot
- 1
1
vote
1
answer
3k
views
How can I access a server on local network using its public name?
I have a problem in which I cannot access a server using its public name from the same network as the server. Access to the server works fine from the internet.
Reading up on this problem, I've ran ...
1
vote
0
answers
224
views
Bind9: Resolve internally then externally
My DNS is running in a split DNS scenario.
Both publically and internally we have the same domain. Lets call it test.com
When an internal user goes to test.com they get a different response to the ...
- 11
2
votes
1
answer
122
views
Is it safe to add parent domain as additional zone within DNS?
Our internal Windows domain is ad.company.co.uk.
When we try to access mail.company.co.uk (for OWA or Outlook Anywhere, as an example), it resolves to the external IP address of the router and gets ...
- 6,290
0
votes
1
answer
1k
views
How to delegate a zone from Microsoft Windows 2003 DNS server to dnsmasq?
I have a split domain setup on my production server farm:
Each server has both an external (internet facing) IP address and a private internal (LAN facing) IP address. A local DNS server running ...
- 134k
2
votes
1
answer
1k
views
Split DNS for a VPN site without a server
So here's my current setup:
Home:
RV220W
Office:
RV042
I have an IPSEC VPN running fine and dandy. Everything pings. I can manually nslookup to my dns servers over the VPN just fine.
Now, despite ...
- 14k
0
votes
2
answers
2k
views
using one of 2 DNSs differentiated by requested domain
I'm using some sort of a dns-proxy service (the details aren't clear but as far as I understand it works by resolving the the domain into a cloud based proxy server and returning it's address whilst ...
CommunityBot
- 1
3
votes
2
answers
2k
views
Split DNS - Cleanest solution for easy maintenance?
We have split DNS set up for our domain, which causes internal clients to resolve different DNS records from external clients.
As it is right now, the two zones are managed completely separately. For ...
- 925
Related Tags
domain-name-system × 42
bind × 16
internal-dns × 15
active-directory × 7
windows × 5
vpn × 4
dns-zone × 4
ubuntu × 3
windows-dns × 3
linux × 2
azure × 2
openvpn × 2
dnsmasq × 2
split-tunnel × 2
dns-policies × 2
networking × 1
security × 1
exchange × 1
email-server × 1
domain × 1
more related tags
Hot Network Questions
- Does standard quantum mechanics imply anti realism?
- LGPL obligations for using glibc
- Finding a nilpotent, infinite, f.g., virtually abelian, irreducible integer matrix group
- Piping live sound from raspberry pi to macOS
- Have there been notable scientific research articles with ground-breaking results in Young Earth Creationism research?
- How to create grep output in the order of the input file?
- Torah scholar conceding due to a logical but unlearned argument
- Ryanair seating policy: will two passengers be seated apart if you don't pay for a seat?
- Two-sided t-tests: Why do we need to test two-sided if your estimate is telling you in what tail to look already?
- Safe to remove out-of-service 3-line landline junction box by myself?
- If we know that there were no type 1 errors in previous tests, should we still make corrections for multiplicity?
- Can motion be oscillatory but not periodic?
- Does scouring a stainless-steel pan cause it to release metals into food?
- How do I check if a GameObject is touching another GameObject in Unity?
- What is the meaning of asymptotic security proofs in practice?
- Endomorphism ring of a generic elliptic curves in positive characteristic
- How can my book purchase get the most money to an author?
- What would the climates/biomes on my fantasy continent be?
- Should I disclose a mental disorder that's been impacting my job to HR/my boss?
- Why is there a year 1 B.C., a year 0, and a year 1 A.D. in NASA’s Five Millennium Canon of Solar Eclipses?
- Can an Injection Reservoir apply to Athletics Maneuvers?
- How to make a device to randomly choose one of three possibilities, with caveat that sometimes one of them is not available?
- What kind of lightbulb is pictured here, having a clear bulb window and 4 yellow vertical rods?
- How to evenly mix stir fried vegetables with noodles?