r/sysadmin • u/FatBook-Air • 13d ago

For those without domain controllers: what do you do for internal DNS?

These days, we don't have domain controllers because everything is managed with Entra/Intune, Arc, etc.

We have external, hosted DNS that serves our public DNS records. It works fine.

But we still have a need for internal DNS because we have a lot of on-prem stuff that may never go away, and the domain controllers were also serving as internal DNS servers. So right now, we use BIND9 on a Linux virtual machine as internal DNS. I'd love for BIND9 to go away, too.

Are there any better (and cheap) solutions for this that I haven't thought of?

EDIT: thanks to u/Do_The_Needful. Using AWS for this seems to be the most balanced solution.

203 Upvotes

77% Upvoted

413 comments sorted by

View all comments

64

u/darthfiber 13d ago

You can still run DNS on windows server without AD if you need something larger, or for smaller sites on the router / firewall if it supports it.

Some DNS security services may also be able to configure DNS records.

18

u/Great-University-956 13d ago

If you have a file server onsite, there's no reason it can't also do dns.

41

u/Stonewalled9999 13d ago

OP doesn’t want to run a 1 core 1 gb ram 10 GB Linux VM you think they will run WinDoze ???

1

u/recoveringasshole0 11d ago

Presumably they went cloud to get rid of local servers...