Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1171
  • Last Modified:

DNS Forwarders on Domain controllers

Hi

On all our domain controller's we have in place Google Public DNS IP addresses as forwarders.
 
•8.8.8.8
•8.8.4.4

Not sure if this is good practice, any thoughts on this or recommendations?
0
lhrslsshahi
Asked:
lhrslsshahi
1 Solution
 
MaheshArchitectCommented:
Its not best practise to set forwarders to public DNS on all AD \ DNS servers
If you have multiple sites having multiple DC \ DNS servers, then I prefer to enter forwarder DNS IPs on one DNS server in a given site.
Even in multisite organizations also, some times they preffer to route internet traffic through hub location.

For Microsoft, either root hints or forwaders must be set on all DNS servers to enable internet name resolution.in case of forwader fails root hints can \ will be used as fall back.

But in real world scenario, organization security policies wanted that internet traffic should be routed from perticular DC servers \ routers \Proxy devices.

hope that helps
Mahesh
0
 
*** Hopeleonie ***IT ManagerCommented:
You should add the DNS Servers from your Internet Provider.
Adding too much Servers will not bring you anything! Best practise is to have 2 - 3 Servers.

For an example:
If you have 5 DNS Servers and the first will do the name resolution all other Servers are useless.
0
 
marcoseguracrCommented:
My recommendation is not use all time the ISP DNS (sometimes they are slow depend of your country).

In general use this tool:

https://www.grc.com/dns/benchmark.htm

The DNS Benchmark test the best DNS servers for you based in test a lot of public servers.

I not recommend you use google public dns (they are fast, but track all, jajaja)

NORTON DNS or LEVEL3 DNS are really good ones

In general install it only in your PERIMETRAL DNS, not in your AD environment and forward external from AD=>PerimetralDNS=>World DNS

Greetings

:)
0
 
lhrslsshahiAuthor Commented:
Just what I was looking for! :-)
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now