Friday, May 25, 2012 2:19 PM
Hello. In our environment we use split DNS. Our internal DNS servers are using Windows Server 2008 R2 (with SP1). Externally we use hosted solution by DNS Made Easy (www.dnsmadeeasy.com).
A forward lookup zone (AD-Integrated) has been configured on our internal DNS servers (I will use "xyz.com" as my example - this is not our actual company). I have created an A record for a server named wiki.xyz.com. Also, the internal DNS server has been configured to use forwarders for queries it cannot resolve (specifically 22.214.171.124 and 126.96.36.199 which are Google's).
Externally, I have created an A record for the same server (wiki.xyz.com) at our hosted DNS provider (DNS Made Easy). This points to a public IP address which is NAT'd to our internal server.
All the above configuration works fine. My actual question is as follows:
I create an external record named www.xyz.com which points to a hosted website provider. This works fine for people accessing it from the public internet. However, internally, I cannot resolve www.xyz.com using our internal DNS server which has the forwarders to Google DNS.
If internal DNS cannot find www.xyz.com (which I know is not created internally), should DNS forward to Google DNS and find the record that is configured at DNS Made Easy?
I know it works if I create the www.xyz.com internally, but I was wondering if I can avoid creating all these records internally?
Saturday, May 26, 2012 4:25 AM
The query doesn't forward to Google DNS, if there is the DNS zone xyz.com to be hosted in the internal DNS.
To resolve the same record, the internal DNS also creates the A record in the DNS zone, xyz.com.
You can also use the same name for the internal domain and the external domain. However, this method is not recommended. It creates name resolution problems because it introduces DNS names that are not unique. This method requires additional configuration to enable optimized performance.
- Marked As Answer by Tiger LiModerator Tuesday, May 29, 2012 4:48 AM
Tuesday, May 29, 2012 4:56 AMModerator