DNS Design

[jfk8680]

Hi,

I am designing a DNS structure for my company. For as far as I know there are two secure, desireable desgin options:

Split brain DNS
Same internal/external name. ISP hosts the external DNS zone, my LAN DNS servers host the internal zone.

Different internal/external names
ISP hosts the .com domain, my LAN DNS servers host the .local domain.

I would like to here some pros and cons for each design option!

thanks...

Jeffrey

 

[GlenJohnson]

I would go for split brain myself. Check out

http://www.microsoft.com/serviceproviders/whitepapers/split_dns.asp

Good luck.

Glen A. Johnson
"Give the laziest man the hardest job and he'll find the easiest way to do it."

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[jfk8680]

Split brain is my favourite design too but I would like to hear why you'd go for split brain (or different domain names method for that matter).

The only con I can think of with the 'different internal/external domains' approach is that you'd have to register the local domain name too which brings extra costs along.

The con I can think of with split brain is that the

http://www record

(and maybe other records) has to be added to the internal DNS zone in order to make them available to the internal clients.

Are there any other pros and cons which I am missing????

Jeffrey

 

[GlenJohnson]

Split brain is my favourite design too but I would like to hear why you'd go for split brain (or different domain names method for that matter).
The whole reason I like split brain is the fact that you don't have to have a different domain name. Instead of company.com and company.local to resolve your dns, splitbrain allows you to use company.com, but filter what the outside world can see of your local network. The biggest con I can think of is if you want to pay your isp to handle your dns, or do it yourself. I've not set it up myself, but it looks like you really need to know your dns. Good luck.

Glen A. Johnson
"Give the laziest man the hardest job and he'll find the easiest way to do it."

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[TKSlayer]

There are some good FAQ's about DNS and structure here:

http://www.acmebw.com/askmrdns/archive.php?category=81&question=485

and

http://www.acmebw.com/askmrdns/archive.php?category=81&question=388

Hope it gives some insight.