Let's assume you have a registered domain name called mycompanycloud.com. You want all your EC2 instances to use that domain name to communicate with each other. Assume you launch a database instance that you want to refer to as db01.mycompanycloud.com. What you do is you add a CNAME record in the DNS zone for mycompanycloud.com and point it to the external AWS name assigned to that instance. For example:
# route53 add_record ZONEID db01.mycompanycloud.com CNAME ec2-51-10-11-89.compute-1.amazonaws.com 3600
The advantage of this method is that DNS queries for db01.mycompanycloud.com from within EC2 will eventually resolve the CNAME to the internal IP address of the instance, while DNS queries from outside EC2 will resolve it to the external IP address -- which is in general exactly what you want.
There's one more caveat: if you need the default DNS and search domain in /etc/resolv.conf to be mycompanycloud.com, you need to configure the DHCP client to use that domain, by adding this line to /etc/dhcp3/dhclient.conf:
supersede domain-name "mycompanycloud.com ec2.internal compute-1.internal" ;
Then edit/overwrite /etc/resolv.conf and specify:
nameserver 172.16.0.23 domain mycompanycloud.com search mycompanycloud.com ec2.internal compute-1.internal
The line in dhclient.conf will ensure that your custom resolv.conf file will be preserved across reboots -- which is not usually the case in EC2 with the default DHCP behavior (thanks to Gerald Chao for pointing out this solution to me).
Of course, you should have all this in the Chef or Puppet recipes you use when you build out a new instance.
I've been applying this strategy for a while and it works out really well, and it also allows me to not run and take care of my own BIND servers in EC2.
Thank you. thank you. thank you. for a great solution to this.
Thanks for pointing me in the right direction. I think the dhclient.conf has to read something along these lines though:
supersede domain-name "mycompanycloud.com";
supersede domain-search "mycompanycloud.com", "ec2.internal", "compute-1.internal";
Thanks for the information regarding using Route53. I've explored this a produced a solution using bash and python'boto' which I have written about at http://www.practicalclouds.com/content/blog/1/dave-mccormick/2012-02-28/using-route53-bring-back-some-dns-lovin-your-cloud
Post a Comment