Windows 2019 Split Brain DNS Options

Question

My company's external DNS name is for example: company.com, but internal AD and clients are members of the internal.company.com domain. Our Dev Team wants some of their internal Apps to respond to the name App.company.com even though they are not externally accessible. I know I can setup split DNS, and have read about DNS policies which is an option for me since we are using Windows 2019, but my question is my AD / DNS servers only have one network interface. How can I setup split DNS DNS for a hand full of DNS records without messing up DNS resolution for other externally hosted sites for the company?

Answer 1

Hello there,

You might need to look into other options. By externally accessible do you mean from different locations?

Another method to differentiate between external and internal clients is by using client subnets as a criteria. If you can identify the subnets to which the internal clients belong, you can configure DNS policy to differentiate based on client subnet. For information on how to configure traffic management using client subnet criteria, see Use DNS Policy for Geo-Location Based Traffic Management with Primary Servers.

Use DNS Policy for Geo-Location Based Traffic Management with Primary Servers

https://learn.microsoft.com/en-us/windows-server/networking/dns/deploy/primary-geo-location

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--