DNS

Official DNS

https://status.management.confirm.ch/api/badge/3/status?style=flat-square https://status.management.confirm.ch/api/badge/4/status?style=flat-square

We’re running our own authoritative ISC BIND DNS servers for several zones, but we try to keep the high-level DNS architecture as simple as possible.

Since the DNS servers will resolve internal, and external DNS queries, we’re using views to respond differently based on the source IP address. Check out the «Views» documentation for more information.

Please also note, we’re using DNSSEC for all hosted zones.

Note

The deployment, and an extensive documentation for our DNS servers can be found in the GitLab DNS project.

DNS hostnames

The hostnames of our servers can be found in the Ansible project.

However, as described in the DNS project, most of the servers have two separate interfaces, which can be looked up via DNS like this:

  • *.lan.confirm.ch: LAN interface w/ a private IP address

  • *.wan.confirm.ch: WAN interface w/ a public IP address

Note

The DNS hostnames for our servers are automatically registered via nsupdate by Ansible, resp. the dns_* playbooks.

See also

Check out the Dashboard for the SSH URL’s.

DNS wildcard domains

To enable fast deployments via 🐳 Docker to the dedicated Environments, we’ve several DNS wildcard domains as descrbied in the Wildcard domains chapter.