host your subdomain on your own ?

[Harry Waddell]

On Fri, 12 Nov 2021 16:48:23 +0000
lejeczek via bind-users <bind-users at lists.isc.org> wrote:

> Hi guys.
> 
> I'm looking to setup my subdomin in-house and I'm hoping for 
> some wise advises from experts, it's my first foray into 
> this thus go easy on me please.
> 
> zone.top - is hosted by a public registrar
> priv.zone.top - I want to delegate to my own bind
> I'd hope for some generic recipe and pointer to docs, thanks.
> 
> Now what I think might be the tricky part though I get that 
> an expert might say - trivial.
> I am thinking of 'views' or split-horizon or whatever other 
> nomenclature applies, though I hear that that/those are 
> discouraged by experts?
> Or! might that above be unnecessary(?) if, it's possible and 
> allowed that such public, mine bind will resolve to IPs 
> which are 'private' - all that so my 'priv.zone.top' will 
> resolve to whole www but resources of the zone/domain will 
> be available, as they are, only in/via private networks.
> 
> Does that make sense?
> many thanks for all the help. L
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users


So long as you control the dns client configuration of your company's
in-house systems, you can do whatever you like. The client connects to an 
internal dns server, which believes itself to be authoritative for 
priv.zone.top and responds to queries as expected for that zone. 

IF you want the public internet to query that subdomain, you'll need that
delegation setup in the public dns server for zone.top 
( e.g. as obtained via whois ). 

If for some reason it's not practical to have the local dns server
handle all queries for these in-house systems, you can use something like
dnsmasq to route just the priv.zone.top to the internal dns servers. 
( off topic for here, but easy enough to find online should you need to )

-- 
Harry Waddell <waddell at caravan-epub.com>