4 ms·
I personally use split horizon DNS for my home lab. I have several things that I put behind Cloudflare, but I don't want my local access to go me > cloudflare
by ryan29 5y ago
I personally use split horizon DNS for my home lab. I have several things that I put behind Cloudflare, but I don't want my local access to go me > cloudflare > me, so I use split horizon DNS. If you're not behind something like Cloudflare you can use NAT reflection (hairpin NAT), but those are a bit of a hack.
Canada also has some large, private networks used by provincial governments that use split horizon DNS and DoH is going to be a huge pain for them. One specific example would be libraries that are on a private network and have access to resources handled differently depending on how you connect; via the private network = no auth, but via the internet = auth required.
Split horizon DNS is a simple, practical way of affecting how traffic is routed in a lot of cases.
- josephcsible 5y ago> you can use NAT reflection (hairpin NAT), but those are a bit of a hack. You think that hairpin NAT is a hack, but that split-horizon DNS isn't?