nsd users - Jun 2021 - Split DNS to Resolve Servers Internally

Dear All,

I am in the process of installing Authoritative DNS servers using NSD.
Feels a bit confident now. As I am running Djbdns at present, it has the
ability to resolve names based upon the machines, if they are accessed from
outside the network or inside the network with a single installation.

I am not able to figure out how I can achieve this? The only possibility of
doing it can be running two instances of NSD on two different servers, one
for external name resolution and another for Internal servers. Same thing
can be achieved by running two instances of NSD on the same server, with
two interfaces.

I have never tried any other DNS software (Djbdns was wonderful, with all
these features, I wish, somebody should maintain it), so any thoughts as to
how to achieve this with NSD.

And yes, I want to achieve this with NSD, so I think this query is
appropriate for this mailing list. People are free to give outside the
scope of this software though.

Thank you.

Mukul
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20210610/af105912/attachment.htm>

On 10/06/2021 13:18, Mukul Shukla via nsd-users wrote:

Hi Mukul,
> I am in the process of installing Authoritative DNS servers using NSD.
> Feels a bit confident now. As I am running Djbdns at present, it has the
> ability to resolve names based upon the machines, if they are accessed from
> outside the network or inside the network with a single installation.
This concept is called "split DNS".

[snip]
> And yes, I want to achieve this with NSD, so I think this query is
> appropriate for this mailing list. People are free to give outside the
> scope of this software though.
NSD does not have any ability to do split DNS. You have to run multiple
instances of it (whether on separate servers, or on separate instances
of one server).

BIND has this feature, and it's called "views". A single instance
of
BIND can provide answers from different copies of a zone based on the
client's address.

Knot DNS has a limited variant of this feature, called "dnsproxy".

Regards,
Anand