Solved

Split DNS

Posted on 2016-11-17
3
39 Views
Last Modified: 2016-11-21
Hi:
1:- What is a Split DNS and where it is used.

Please suggest some good DNS site where I can get complete knowledge of working environment?

Warm regards
Sanjeev Jha.
0
Comment
Question by:Sanjeev jha
3 Comments
 
LVL 16

Expert Comment

by:Dirk Mare
ID: 41891911
This wiki article explains it pretty good..
https://en.m.wikipedia.org/wiki/Split-horizon_DNS

DirkMare
0
 
LVL 12

Accepted Solution

by:
Kent W earned 500 total points
ID: 41891925
Split DNS means that your internal DNS is different than external.
We use this at my company.

Scenerio - The web servers we use for day to day business are also the same web servers our clients hit externally.
Since our web servers and load blancers are physically on our local lan, thus internal, we resolve their internal IP addresses with our internal DNS servers, which are set up to point to the private IPs of said sites  or the load balancer(s) they are behind.

Each of these web servers also has a NATed Public<>Private IP address so they can be reached externally.
We use a different DNS service (the one named in our NS records via the domain registrar) to answer external DNS queries, which resolves to the public, routable IP that we also have NATed through to the internal private IP for said server(s).

The effect is, if  you are on our local lan, and useing our local name servers, you are given the internal address for those assets that are set up this way, and if you are not using our internal DNS, you go through the top level hint servers and ultimately arrive at the named public NS servers for the domain.

I don't know of a public example to give a particular site that may have this setup, as you can see just due to the nature of how it operates.
The split DNS setup only makes sense if you have in internal private network that is also served up, in some form, publicly. As you can see, you can't really setup this scenario on the public net.

Split-horizon DNS is the configuration of ONE Name Server to handle both the internal and external query "answers", thereby giving the correct internal or external IP to the relative DNS client. In BIND, for example, this is accomplished with ACL resource record , then applied to "view" resource record(s) (external / internal views).
0
 

Author Closing Comment

by:Sanjeev jha
ID: 41896452
Thanks for clearing doubt
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most DNS problems are VERY easily troubleshot and identifiable if you can follow the steps a DNS query takes. I would like to share the step-by-step a DNS query takes from the origin to the destination. _____________________________________________…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
Many functions in Excel can make decisions. The most simple of these is the IF function: it returns a value depending on whether a condition you describe is true or false. Once you get the hang of using the IF function, you will find it easier to us…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now