[Samba] split horizon and authoritative answers..?

Rowland penny rpenny at samba.org
Mon Jul 29 18:17:00 UTC 2019


On 29/07/2019 17:45, Joachim Lindenberg via samba wrote:
> I need to implement split horizon DNS, as I have just one external IP address (dynamic.lindenberg.one in external DNS) but multiple internal ones. External requests are distributed by port or using sniproxy (in particular 443), and all externally visible names are in a distinct zone then my domain, but with an additional indirection: names like backup.lindenberg.one resolve to CNAME backup.rot.lindenberg.one, and only backup.rot.lindenberg.one is resolved differently internally/externally.
>
No, you want to implement split horizon/split brain, but you shouldn't, 
you should have used a subdomain of your external domain for the AD dns 
domain.

As far as I am aware, you need Windows 2016 to have any chance of 
something like this working.

Rowland





More information about the samba mailing list