This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 20%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EY%3C/text%3E%3C/svg%3E)
Hi there,
Hope there is someone can help me on this case.
I am facing a problem when create a CNAME in forward zone on our internal DNS.
Our primary domain is abc.com and have a developing domain abc-dev.com.
Both domain are existing in external DNS server, but abc.com only existing on internal DNS server.
Our developer is requesting to have a CNAME, uat.abc-dev.com, and can only be resolved internally.
I tried to create a new zone in internal DNS server which is abc-dev.com and added a CNAME uat. in there.
But this caused all other existing abc-dev.com URLs cannot be resolved internally.
Because CNAME cannot be the record as parent, I cannot create a forward zone named as uat.abc-dev.com.
I tried to add a forwarder, but it still does not work for resolving other abc-dev.com URLs.
Could you please let me know if there is a way to solve this problem?
Thank you.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Maybe do something with a split-brain deployment.
https://learn.microsoft.com/en-us/windows-server/networking/dns/deploy/split-brain-dns-deployment
--please don't forget to upvote and Accept as answer if the reply is helpful--
Thank you for response, @Anonymous
I have read the article you shared, but it seems not a solution I am looking for.
We do not want to allow external people to query our internal DNS , but want to internal DNS can resolve two domain (abc.com and abc-dev.com) and can forward not resolvable query (e.g. 123.abc-dev.com which only existing in external DNS, but uat.abc-dev.com locates in internal DNS) to an external DNS which is hosted by our vendor.
This is only for internal users DNS resolving, but there are records on internal and external DNS server.
Could you please let me know if you have any other suggestions that I can try?
Thanks again.
Maybe the developer can just use a hosts file entry.
But hosts file does not support CNAME......
Yes, you're right about this
Some ideas here.
https://serverfault.com/questions/118290/cname-record-alias-in-windows-hosts-file
--please don't forget to upvote and Accept as answer if the reply is helpful--
Thanks again for updating, @Anonymous .
However, our users are using both Windows and MacBook, so the PowerDNS probably cannot work.
And because we have a security application, Cisco Umbrella, installed on all user's laptop, it is not able to do change DNS configuration on end user side.
Ideally, hope there is a solution from internal server side.
Is there a way to let the internal server can send the query to relay/external server when it cannot find the record on it?