|
|
|
|
|
by Walf
16 days ago
|
|
I wasn't talking about your opinion of it, I was simply using a rhetorical question to point out the nonsensical premise of your response: >Wait…what? You have a fully internal service and you dont have an internal DNS server? You can't do split horizon without an internal DNS service. By definition it's a non-public service that gives separate results to public. |
|
So what's your solution when you have a wholly private service that will never have a public v4 address, nor a publicly routable v6? How do clients get the address for a nice domain name without the addresses in public DNS?
Which, if you claim you use private DNS, you know you can indeed solve by only having the private records sit on your private DNS service that can only be hit by clients on the internal network. Without the architectural bad practice of implementing split horizon.