DNS – Bind9 – split DNS internal/external

Preamble

Bind9 allows users the possibility of using one DNS for internal and external queries. Reducing the need to run two separate instances of Bind9.

Actions taken

Synology now publishes a DNS package running Bind9. I am currently running this for an internal DNS to speed up my local internal network. I however wished to try and expose an external DNS to gain greater control of my domain name.

I tried this by configuring the DNS using the synology DNS interface.
I however found I need to have

  • Recursion on for internal caching DNS.
  • Recursion off for external authoritative DNS.

This functionality however didn’t seem easily possible through the gui. Also effectively you are running an external facing piece of software very near your internal infrastructure there is a great risk of cross contamination either by user error, or software vunerablity.

Conclusion

As I said before. Why bother running your own external DNS. Your registrar does a better job.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.