Share via

Internal DNS records required to direct to Externally hosted website in Split Brain DNS

Shane King 86 Reputation points
2022-05-06T06:44:25.567+00:00

I have a Server 2019 AD domain where there is an Exchange Server 2019 in place. As a result we run Split Brain DNS. We have a website externally hosted.

If we didn't have split brain, I'd just use a conditional forwarder to the Domain Name Registrants DNS Server..

Since going to Server 2019, I can't figure out what DNS records I need to create in our split brain DNS to allow internal staff to get to the externally hosted website.

I can see that the presence of the split brain DNS is causing my server 2019 server to provide NS services to the workstations for ourdomain.com.au

Nothing I seem to add to DNS will allow internal users to get to our external website via www.ourdomain.com.au or HTTPS://ourdomain.com.au

So what records do I need to create for this to function? I can't be the only business in the world that has internal DNS, with Split brain, that needs staff to be able to access our externally hosted website!!!

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,844 questions
Windows DHCP
Windows DHCP
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.DHCP: Dynamic Host Configuration Protocol (DHCP). A communications protocol that lets network administrators manage centrally and automate the assignment of Internet Protocol (IP) addresses in an organization's network.
1,044 questions
0 comments
Accepted answer
  1. Gary Reynolds 9,506 Reputation points
    2022-05-10T11:41:46.54+00:00

    Hi @Shane King

    Have a look at this post which is asking a simpler question.

    https://learn.microsoft.com/en-us/answers/questions/835881/setting-up-split-brain-dns.html

    Gary.

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,741 Reputation points
    2022-05-11T07:15:58.217+00:00

    Hi there,

    In general, the solution would be to maintain two distinct DNS zones that represent your namespace to internal and external clients - one on internal DNS servers - the other on external DNS servers.

    You could also create a new forward lookup zone in DNS that matched your external namespace, then create an A record for the site or address you wish to intercept and point that A record towards the internal IP.

    Split-brain DNS is a Domain Name System (DNS) configuration method that enables proper name resolution of local resources from both inside and outside of your local network and this will not restrict the access to the externally hosted website.

    You can read more about this in the below article. DNS setting for internal/external server https://social.technet.microsoft.com/Forums/ie/en-US/d4e0ab58-74c8-4537-b3ac-1577f5c377e2/dns-setting-for-internalexternal-server?forum=winserverDS

    --If the reply is helpful, please Upvote and Accept it as an answer–

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.