Reputation: 11
Ill get straight into it.
We are testing FreeIPA for centralized auth and (local)DNS, however we would like to use our tld company.com as these are internet facing servers and the applications require a resolvable FQDN.
We already use Dyn for managed DNS, however, we want to use local DNS for faster resolution for server to server communication when using FQDN. Will this cause an issue if we have both DNS set up for company.com? (the local DNS will only be available for OUR servers to use) The docs are slightly confusing.
Thanks in advance.
Upvotes: 1
Views: 487
Reputation: 882
You can deploy FreeIPA without integrated DNS server. You would be responsible on managing the DNS entries and upon installation you'll find a sample bind zone file in /tmp that has all entries you need to add to your DNS server manually.
FreeIPA integrated DNS server does not support functionality of views (to split internal/external view), and it does not support being a slave to other DNS server.
You need to choose which DNS server is responsible for your zone as in DNS there cannot be two primary sources for the same zone.
Upvotes: 0