Geek Answers Handbook

AWS Route53: Private and Public Zones in the Same Domain

I read all the AWS documents I can find and GoogleFoo didn’t cite anything.

In my case, we have one example.com domain, and so far we have used it only for public records. For a public zone, one zone is set. I want to create a subdomain for private records for use within our VPC group for our application (for example, specify an instance of ElastiCache).

I tried to create private.example.com as a private hosting zone, pointing to our VPC, and then created the cache.private.example.com file as an entry under it, but it will not be allowed.

I am curious if I can somehow configure the subdomain of our main domain?

example.com - Public ** app.example.com private.example.com - Private ** cache.private.example.com - VPC

OR

Can I also create a Private Hosting Zone with the same top-level domain example.com? I am nervous to try this because I do not want to influence the application.

 example.com - Public ** app.example.com example.com - Private ** cache.example.com - VPC
+7
amazon-web-services amazon-route53 dns
source share
2 answers

For a private zone, you will need a different domain. Something like "example.internal". Then you can have "cache.example.internal"

cache.private.example.com will not be allowed in your current setup, because it will look for example.com to resolve this dns. Also note that it will only be allowed inside VPC.

+7
source share

You may have private and public DNS names that have the same name. For DNS queries from the public Internet, a public name is allowed. For requests from your VPC (after you configure the VPC DHCP settings to point to your route 53), a private name will be resolved. We constantly use this in our EC2 instances so that they can talk to each other using private IP addresses.

After you configure your private zones in Route 53, review this document to configure DNS resolution in VPC:

DHCP Settings

Note. You do not need to duplicate all entries in your public area. Just create the records for your private zone that you need. From your VPC, if you do not have a personal entry, the public entry will be returned.

+1
source share

More articles:


All Articles