You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Learn more about how internal DNS works within the Scaleway ecosystem, and how to ensure your infrastructure is using DNS efficiently.
5
5
content:
6
-
h1: Understanding internal DNS
6
+
h1: Understanding Scaleway DNS
7
7
paragraph: Learn more about how internal DNS works within the Scaleway ecosystem, and how to ensure your infrastructure is using DNS efficiently.
8
8
tags: vpc private-network dns dns-server dns-resolution hostname
9
9
dates:
@@ -21,36 +21,49 @@ The **D**omain **N**ame **S**ystem (DNS) is a naming system for devices connecte
21
21
22
22
## Scaleway DNS overview
23
23
24
-
Scaleway Private Networks benefit from managed internal DNS. This allows the resolution of resources' **hostnames** on the Private Network, into their private IP addresses. This managed DNS service is automatically exposed in each Private Network and no user-configuration is required.
24
+
Scaleway Private Networks benefit from managed internal DNS. This allows the resolution of resources' **hostnames** on the Private Network, into their private IP addresses. This managed DNS service is automatically exposed in each Private Network and no userconfiguration is required.
25
25
26
26
<Messagetype="note">
27
27
When a Private Network is attached to a [legacy Public Gateway](/network/public-gateways/concepts/#ipam), the gateway’s DNS takes priority over that of the Private Network.
28
-
<Message>
28
+
</Message>
29
29
30
30
## Hostname format
31
31
32
-
A resource's hostname is equivalent to the name you gave the resource when creating it. For example, if you have an Instance with the name `instance123` attached to a Private Network named `prodpn`, its address on that network is `instance123.prodpn.internal`.
32
+
A resource's hostname is equivalent to the name you gave the resource when creating it. The full format for internal addressing is `<hostname>.<private-network-name>.internal`. For example, if you have an Instance with the name `instance123` attached to a Private Network named `prodpn`, its address on that network is `instance123.prodpn.internal`.
33
33
34
34
<Messagetype="tip">
35
35
- If you update the resource's name after creating it, and thus its hostname changes, it will not be automatically updated on our DNS records unless you detach and reattach the resource to the Private Network. <br/><br/>
36
36
- If you created the resource via the API, and it has dots in its name, these dots should be replaced by dashes for the purposes of DNS resolution (`my.instance` --> `my-instance`). We generally recommend avoiding using dots in your resource names to avoid issues.<br/><br/>
37
-
- You can also reach a resource via its resource ID, e.g. `e49902a6-ed4c-431f-bd62-0fc41063eec0.prodpn.internal`
38
-
37
+
- You can also reach a resource via its resource ID, e.g. `e49902a6-ed4c-431f-bd62-0fc41063eec0.prodpn.internal` - see below for full details.
39
38
</Message>
40
39
41
40
## DNS resolution details
42
41
43
-
The managed DNS service is exposed on each Private Network through the following IP addresses:
42
+
The managed DNS resolver service is exposed on each Private Network through the following IP addresses:
44
43
45
44
- IPv4: `169.254.169.254`
46
45
- IPv6: `fe80::200:22ff:fe05:ca1e`
47
46
48
-
The DNS service parses packets' DNS messages, rewriting DNS queries from `<resource_name>.<private_network_name>` to `<resource_name>.<private_network_id>.<vpc_id>` to enable hostname resolution across Private Networks within a VPC.
47
+
The service resolves both regular public records, as well as internal VPC records
48
+
49
+
<Messagetype="tip">
50
+
The `.internal` at the end of internal addresses is important in enabling the resolver to distinguish between internal and external/public DNS. For this reason, you should always add `.internal` when addressing resources within your VPC.
51
+
</Message>
52
+
53
+
The DNS service resolves the following formats:
49
54
50
-
DNS is then fully resolved via an upstream DNS resolver cluster.
55
+
```
56
+
<resource_name>.<private-network_name>.internal
57
+
<resource_name>.<private-network_uuid>.internal
58
+
<resource_uuid>.<private-network_uuid>.internal
59
+
```
51
60
52
61
Note that DNS cannot resolve or forward queries between different VPCs. It can only resolve hostnames for resources within the same VPC, though they may be on different Private Networks within that VPC.
53
62
63
+
## Rate limiting
64
+
65
+
Currently, DNS requests are rate-limited to 50 requests per second per resource. Watch this space as we work to be able to increase this limit to accommodate higher traffic volumes.
66
+
54
67
## Troubleshooting
55
68
56
69
If you experience problems with DNS, try the following steps:
@@ -63,13 +76,4 @@ If you experience problems with DNS, try the following steps:
63
76
64
77
4.**Check whether you are using Network Manager**: DNS does not work out of hte box for Linux distributions using Network Managed, such as **RockyLinux**. Find out how to resolve this problem [in our troubleshooting page](/network/vpc/troubleshooting/private-dns-dhcp-not-working/#distributions-running-network-manager)
65
78
66
-
If you are still having problems reaching a resource attached to a Private Network via its hostname, [open a support ticket](https://console.scaleway.com/support).
67
-
68
-
## Anything else?
69
-
70
-
E.g.
71
-
- Any other tips for effective hostnaming
72
-
- Any options for manual configuration (configuring custom DNS names or domains within SCW internal DNS?)
73
-
- Anything re: InterLink?
74
-
- Any best practices to ensure efficient DNS resolution/avoid unnecessary requests?
75
-
- Any info as to which resources can access internal DNS/access to DNS query logging?
79
+
If you are still having problems reaching a resource attached to a Private Network via its hostname, [open a support ticket](https://console.scaleway.com/support).
0 commit comments