topic Re: Split internal and external DNS lookups in General Topics

Split internal and external DNS lookups

nthen — Mon, 01 Jul 2013 13:55:48 GMT

I am wanting to split internal and external DNS lookups on my PAN appliance to cut down on some traffic hitting our internal DNS servers. I think I can use a DNS Proxy to specify where the resolution occurs and what interface. Does anyone have experience in splitting DNS lookups in this fashion?

Re: Split internal and external DNS lookups

kprakash — Mon, 01 Jul 2013 16:32:06 GMT

Hi Nthen,

Did you have a chance to go through these links?

https://live.paloaltonetworks.com/docs/DOC-3637

https://live.paloaltonetworks.com/docs/DOC-3522

https://live.paloaltonetworks.com/docs/DOC-4633

BR,

Karthik

Re: Split internal and external DNS lookups

Chatri — Mon, 01 Jul 2013 16:48:09 GMT

Hi Nthen,

Have you considered the option of setting up DNS proxy, setting up a DNS Proxy on the Palo Alto will enable caching of entries and will reduce the number of queries made to the configured DNS servers and will end up reducing DNS requests.

Re: Split internal and external DNS lookups

mikand — Mon, 01 Jul 2013 17:07:49 GMT

The external lookups are towards resolvers or authoritive dnsservers?

Why not use two (well four for redundancy) physical machines?

One for internal dns and one for external stuff on each vlan.