3 ms·
I decided to try split DNS to avoid leaking the internal IPs, but it turned out a bit more fragile than I imagined. Especially Android is finicky, ignoring you
by magicalhippo 2y ago
I decided to try split DNS to avoid leaking the internal IPs, but it turned out a bit more fragile than I imagined.
Especially Android is finicky, ignoring your DNS server if it doesn't like your setup. For example, if it gets an IPv6 address, it requires the DNS server to also have an IPv6 address, or it'll use Google's DNS servers.
It works now but I'm not convinced it's worth it for me.
- Hamuko 2y agoI use CNAME records and it works on everything except Windows, where it works sometimes. Basically, CNAME record from service.myserver.com to myserver.internal on a public DNS server, A record from myserver.internal to 1.2.3.4 on private DNS server. I think I could maybe get it working on Windows too by tweaking the TTLs. Currently both DNS servers are automatically setting the TTL and I think Windows freaks out about that.
- ebb_earl_co 2y agoThis seems like a good technique. What DNS software do you use?
- Hamuko 2y agoI just use the one built into my UniFi router. Public DNS side is Cloudflare, which allows easy DNS validation for Let's Encrypt.
- capitol_ 2y agoSplit DNS causes lots headaches, it also makes it really hard to root cause analysis of failures when they involve DNS.