Use vNIOS Instance as Primary DNS for VPC
- Shirly Tsang
Analytics
Infoblox vNIOS for AWS instances can be used as the primary DNS servers for AWS VPC. This allows you to extend your enterprise DNS and RPZ services into your AWS networks.
Setup DNS Service
First, we will configure basic DNS service on the Infoblox vNIOS for AWS instance. In this guide we will configure the server for both authoritative and recursive DNS; in production environments you will likely want to separate these roles on multiple appliances.
Login to your vNIOS for AWS instance Grid Manager GUI.
Navigate to the Grid → Grid Manager → Services tab.
Click on the DNS service.
Select the checkbox next to your vNIOS member.
Click the
start button to start the DNS service.
Click Yes in the popup window to confirm.
Once the service is started, open the dropdown next to Edit in the right-hand menu.
Select Grid DNS Properties.
In the Grid DNS Properties window, select the Queries tab.
Optionally, change Allow queries to Set of ACEs.
Use the
add dropdown to select IPv4 Network.
For Address enter the network prefix for your VPC. For example: 172.17.0.0.
Use the Netmask slider to select the correct mask size. For example: /16.
Click Add.
Scroll down and select Allow recursion.
Select Set of ACEs.
Use the
add dropdown to select IPv4 Network.
For Address enter the network prefix for your VPC. For example: 172.17.0.0.
Use the Netmask slider to select the correct mask size. For example: /16.
Click Add.
Click Save & Close.
In the Warning window, click Yes.
Click Restart in the banner that opens in the top of the window.
Click the Restart button in the Restart Grid Services window.
Add DNS Zone
To add an authoritative DNS zone, navigate to the Data Management → DNS → Zones tab.
Use the
add dropdown to select Authoritative Zone.
On Step 1 of the Add Authoritative Zone Wizard, select Add an authoritative forward-mapping zone.
Click Next.
On Step 2 enter a name for your DNS zone.
Click Next.
On Step 3 select Use this set of name servers.
Use the
add dropdown to select Grid Primary.
Click Select. The single member of this Grid will automatically be selected.
Click Add.
Click Save & Close to create the new zone. Or click Next to proceed to optional steps.
Click Restart in the banner that opens at the top of the window.
Click the Restart button in the Restart Grid Services window.
Create AWS DHCP Options Set
AWS VPCs use DHCP options sets to specify optional configurations such as a default domain name or the DNS servers your instances should use. We will use an options set to make the Infoblox vNIOS for AWS instance the primary DNS server for a VPC. DHCP options sets cannot be modified after creation, so we will start by creating a new DHCP options set.
In the AWS Management Console, Use the Services menu to navigate to VPC under Networking & Content Delivery.
From the VPC menu, click on DHCP Options Sets.
Click Create DHCP options set.
Enter a name for your option set.
Under Domain name servers, enter the private IP address of your vNIOS for AWS eth1 (LAN1) interface.
Scroll down and click Create DHCP options set.
To assign this DHCP options set to your VPC, select Your VPCs in the menu.
Select your VPC.
Use the Actions dropdown menu to select Edit VPC settings.
Use the dropdown menu for DHCP options set to select the new options set you created.
Scroll down to click Save.
Note: Any new VM instances you create in this VPC will use your Infoblox vNIOS for AWS appliance for DNS resolution. Existing VM instances must be rebooted to apply this change.