Dear all, I have a freeIPA instance which is also connected to upstream / internet DNS servers, but mostly working in a local network which is for most parts seperated from the internet, using a DNS like company.local - where also freeIPA is using this as a kerberos realm. However, we got also domains at the - not freeIPA controlled company.com - and especially some names like testsystem.company.com which are hosted internally in our network and are exposed via DMZ and NAT, so they get different IP addresses. We now would like to have the system test1.company.com not only be available via test1.company.com (with external IP) or test1.company.local (with internal IP), but with the external DNS name and internal IP - so we'd need to somehow rewrite the DNS Name to another IP.
Is there a possibility, other than local hosts files etc - to just rewrite one DNS entry in the server? It is important that the rest of the upstream DNS is untouched (i.e. the rest of the company.com names are served as ususally)
Kind regards and thanks,
Nico
On ma, 23 marras 2020, Nico Maas via FreeIPA-users wrote:
Dear all, I have a freeIPA instance which is also connected to upstream / internet DNS servers, but mostly working in a local network which is for most parts seperated from the internet, using a DNS like company.local - where also freeIPA is using this as a kerberos realm. However, we got also domains at the - not freeIPA controlled company.com - and especially some names like testsystem.company.com which are hosted internally in our network and are exposed via DMZ and NAT, so they get different IP addresses. We now would like to have the system test1.company.com not only be available via test1.company.com (with external IP) or test1.company.local (with internal IP), but with the external DNS name and internal IP - so we'd need to somehow rewrite the DNS Name to another IP.
Is there a possibility, other than local hosts files etc - to just rewrite one DNS entry in the server? It is important that the rest of the upstream DNS is untouched (i.e. the rest of the company.com names are served as ususally)
FreeIPA DNS does not support DNS views.
freeipa-users@lists.fedorahosted.org
-
Alexander Bokovoy -
Nico Maas