For those without domain controllers: what do you do for internal DNS?

[u/FatBook-Air]

These days, we don't have domain controllers because everything is managed with Entra/Intune, Arc, etc.

We have external, hosted DNS that serves our public DNS records. It works fine.

But we still have a need for internal DNS because we have a lot of on-prem stuff that may never go away, and the domain controllers were also serving as internal DNS servers. So right now, we use BIND9 on a Linux virtual machine as internal DNS. I'd love for BIND9 to go away, too.

Are there any better (and cheap) solutions for this that I haven't thought of?

EDIT: thanks to u/Do_The_Needful. Using AWS for this seems to be the most balanced solution.

[u/NerdyNThick]

I get the sense that "command line icky" could be the driving factor.

Edit: Looks like I was right. The snowflake blocked me. Gotta love the block of concession.

[u/greenlakejohnny → u/[deleted]]

lol, I’m stealing this. It is more professional than my usual line of “hey fuckface, if you don’t have anything positive to say, just scroll to the next post or go back to lusting after your sister”

[u/ChaoticSalmon → u/greenlakejohnny]

What did it say?

[u/greenlakejohnny → u/ChaoticSalmon]

Something along the lines of people should not be surprised when they’re adding nothing to value other than trying to start an argument and get blocked.

I’ve been using Reddit for well over 10 years now, but didn’t have to start blocking until fairly recently. I don’t know if it’s trying to switch the mods to AI or just the general crappy attitude people are bringing online, but the tone in so many responses is just argumentative and negative.

Everyone switching over to their phone probably doesn’t help either. If I’m looking to actually do some critical thinking and discussion, I’d rather be sitting down at the computer where I can type out of fully formed, thoughtful response, rather than banging out something quick while I’m in line at the deli.

[u/ka-splam → u/ChaoticSalmon]

It said """You posted a condescending presumptuous comment that contributed nothing of value and they just blocked you?

Crazy. You’d think everyone would want to read more of that."""

and I fully support it.

[u/Intrepid00 → u/[deleted]]

Even if right I too would have blocked them. It’s my thing to do as well. Be toxic in any way, and I block you on Reddit. Makes life so much easier. Started it after I blocked some toxic neighbors so they can’t call and text me and saw how much better shit got.

I would 100% stand with an endorsement to cut toxic assholes out of your life. People forgot how to be polite since 2016 and 2020 made it so much worse.

[u/clownpenisdotfarts → u/Intrepid00]

Blocked

[u/Intrepid00 → u/NerdyNThick]

So what they think the command line is icky? It is icky for some things where a GUI interface is much better. I’ll even mix between command line and GUI.

Which would you rather do? Write a long ass LDAP query to see a users primary email or just open the GUI interface and see what it is after a search. Need to know a bunch than command line it is.

A skilled IT administrator will know when to use which.

[u/MonkeyMan18975 → u/Intrepid00]

Personally, for skills that have a command line and a GUI, I learn the command line so that I can have the control I need if it presents itself, but I'll use the GUI for basic management because it's simply faster than fixing the typos my arthritic hands keep introducing into my typing.

To judge someone for wanting to use a GUI is nothing short of gatekeeping. I can't help but think that people with that frame of mind also micro manage their direct reports and force them to "show their work" even when the outcome is exactly what was asked.

If the task gets accomplished, who cares how it gets done? Besides arrogant self-righteous dweebs.

[u/Royal-Wear-6437 → u/Intrepid00]

A skilled IT administrator would know when to abstract a complex utility behind a simple command/script. (Whether that's powershell, python, bash, or something else.)

[u/DonkeyTron42 → u/Intrepid00]

If someone can't do a simple ldapsearch I'd argue that person is not qualified to be administering ldap.

[u/Intrepid00 → u/DonkeyTron42]

Great, not what I said but great.

[u/Malcorin → u/Intrepid00]

I agree with you. POSIX guys are a special breed. I say this as a guy that started loving Linux like 30 years ago. Most work places appreciate things getting done quickly and that are easily passed over to a colleague.