Configuring DNS Forwarders for your Microsoft DNS infrastructure

What are DNS Forwarders and how they work?

DNS forwarders are servers in a DNS infrastructure that handle queries that the local DNS server cannot resolve. When the local DNS server receives a query for a domain that it is not authoritative for and does not have a cached answer, it forwards the query to another external DNS server specified as a forwarder for resolution. 

Why use DNS Forwarders?

1. Improved Query Resolution: By forwarding queries to a more knowledgeable DNS server, you can ensure quicker and more accurate query resolutions.

2. Reduced Network Traffic: Forwarders can help reduce the amount of DNS traffic on the network by reducing the need for the local DNS server to recursively query other DNS servers on the internet.

3. Centralized Control: Forwarders allow for centralized control of DNS query processing, making it easier to manage DNS traffic and policies.

4. Enhanced Security: Using forwarders can enhance security by allowing only specific DNS servers to communicate with external DNS servers, reducing the attack surface.

 

How to configure DNS Forwarders in DDI Central?

To configure DNS forwarders for your Microsoft DNS servers:

  • Get into the DNS module.
  • Select the Config menu within the DNS module.
  • On the Configuration page, navigate to the DNS Forwarders tab.
  • In the Forwarders List text box,  Enter the IP addresses of the DNS servers to which queries will be forwarded. These IP addresses can be either IPv4 or IPv6 addresses. This list should include reliable and authoritative DNS servers to ensure accurate and efficient DNS resolution.

    Note: The priority is given in the order the IP addresses are entered in the forwarders list, meaning the DNS server will try the first IP address in the list first, and if it fails, it will move on to the next one.

    If you've enabled DNS recursion, it's mandatory to configure the Forwarders list as well. Without a forwarders list, Microsoft DNS recursion servers will not be able to resolve non-hosted domains.
     
  • Enter the Timeout value, which specifies the maximum time the DNS server will wait for a response from the forwarder before trying the next forwarder or giving up. This value is crucial for maintaining DNS query performance and reliability. The minimum value is 0, and the maximum value is 15. The default value is 5.
     
  • Once you have entered the desired forwarder IP addresses and set the timeout, click the Save button to apply the configuration.
 

By following these steps, the DNS server will forward unresolved queries to the specified forwarder servers, enhancing the efficiency and reliability of DNS resolution within your network.

    

 

 
Back to Top