4 ms·
If each network also had unique dns services, then I think in theory you could run a split horizon DNS server on the middleman that rewrites results from the ot
by ryanschneider 4y ago
If each network also had unique dns services, then I think in theory you could run a split horizon DNS server on the middleman that rewrites results from the other network as the “alt” address.
E.g. in the example middleman could rewrite a query for `outernode0` that comes from the inner node network to resolve to 192.169.3.10 (instead of .2.10).
I’m not sure which dns servers allow rewriting logic like that though.
- zamadatix 4y agoThe usual suspect, BIND, has a feature called Response Policy Zones that can serve different responses to different ACL matches (such as source IP). It can even autogenerate the modified records if you ask it politely. Of course a screwdriver also has a feature called Quick Eyeball Removal which may be preferable. That or I'm just bitter about having done this :).
- 3np 4y agoYou can also achieve similar goals in dnsmasq via --localise-queries and --dynamic-host. It's a bit clunky but not complicated.
- Already__Taken 4y agoI run coredns as internal dns and the advice for this solution from them is to run another coredns and solve it in config management. While not a pleasing answer its probably the easiest thing to do. Someone did write a plugin but it requires a fork to get some hooks and that was declined its PR.