Solved

Split DNS

Posted on 2016-11-17
3
70 Views
Last Modified: 2016-11-21
Hi:
1:- What is a Split DNS and where it is used.

Please suggest some good DNS site where I can get complete knowledge of working environment?

Warm regards
Sanjeev Jha.
0
Comment
Question by:Sanjeev jha
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 16

Expert Comment

by:Dirk Mare
ID: 41891911
This wiki article explains it pretty good..
https://en.m.wikipedia.org/wiki/Split-horizon_DNS

DirkMare
0
 
LVL 12

Accepted Solution

by:
Kent W earned 500 total points
ID: 41891925
Split DNS means that your internal DNS is different than external.
We use this at my company.

Scenerio - The web servers we use for day to day business are also the same web servers our clients hit externally.
Since our web servers and load blancers are physically on our local lan, thus internal, we resolve their internal IP addresses with our internal DNS servers, which are set up to point to the private IPs of said sites  or the load balancer(s) they are behind.

Each of these web servers also has a NATed Public<>Private IP address so they can be reached externally.
We use a different DNS service (the one named in our NS records via the domain registrar) to answer external DNS queries, which resolves to the public, routable IP that we also have NATed through to the internal private IP for said server(s).

The effect is, if  you are on our local lan, and useing our local name servers, you are given the internal address for those assets that are set up this way, and if you are not using our internal DNS, you go through the top level hint servers and ultimately arrive at the named public NS servers for the domain.

I don't know of a public example to give a particular site that may have this setup, as you can see just due to the nature of how it operates.
The split DNS setup only makes sense if you have in internal private network that is also served up, in some form, publicly. As you can see, you can't really setup this scenario on the public net.

Split-horizon DNS is the configuration of ONE Name Server to handle both the internal and external query "answers", thereby giving the correct internal or external IP to the relative DNS client. In BIND, for example, this is accomplished with ACL resource record , then applied to "view" resource record(s) (external / internal views).
0
 

Author Closing Comment

by:Sanjeev jha
ID: 41896452
Thanks for clearing doubt
0

Featured Post

Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have a multi-homed DNS setup in windows, you can have issues with connectivity to the server that hosts the DNS services (or even member servers of your domain if this same DNS server is a DC). This is because windows registers all of its IPs…
I've written instructions for one router type, but this principle may be useful for others of the same brand and even other brands of router. Problem: I had an issue especially with mobile devices that refused to use DNS information supplied via…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question