DNS in HMC 3.5

[Shanky]

I'm setting up a consolidated platform, but I've gotten a little lost in DNS.

With the Backnet DNS on the AD01 (and AD02, as I want 2) you set the DNS to deny recusrion, and delete the root hints.

On the FE server you set the Frontnet NIC to use its internal DNS server, and the Backnet NIC to use the AD01 DNS.

So here's where I am lost.

How does the FE server get DNS updates for internet clients?

Are the Backnet Servers DNS all pointing to the AD DNS? I expect so, or they won't be able to register in the AD DNS properly. As they are pointing to a Local only DNS, they can't get on the net. Is the intent of this foe security? Doesn't it mandate the use of a WSUS server?

Is the stripping of the backnet DNS to save load on the AD server? With 2 AD servers, and 2 DNS on the backnet, am I ok to leave them able to use forwarders?

I'm thinking I can do what I want, but I'm also guessing there's a reason for doing it this way...


Shanky

[Shanky]

I'm expecting some comments from seniors.

Shanky

[host.co.in]

Hello Shanky,

Your question is quite complicated but I try to keep DNS as simple as possible to avoid complications. Your first entry in /etc/resolv.conf gets top most priority and that entry should be of some public DNS server to ensure proper functioning of Domain system. If you have no mention of public DNS IP in your /etc/resolv.conf

If you can provide some more clarifications then it would be quite easy for us to give you desired solution.

[Shanky]

thank you for the reply

Please can you explain me what kind of a clarifications you need that so we will be able to solve this issue.

Shanky

[host.co.in]

thank you for the reply

Please can you explain me what kind of a clarifications you need that so we will be able to solve this issue.

Shanky

Not sure if you are here to get support or answer our questions.

Have a nice day

[Shanky]

>>we will be able to solve this issue<<
i mean to say that Me and your company will be able to solve this issue.
well.. thats not really IMP lets come back to issue

Shanky

[Shanky]

Any solution ..?

Shanky