Ec2 Instance often Doing DNS query with Public DNS Resolver.

0

Hi Team. My ec2 instance instance is often communication with public DNS resolvers (google, azure, Cloudflare) instead of AWS VPC's DNS resolver. EC2 instance's Network settings are set to automatic (DHCP) and unchanged. can you please help me find why my ec2 is communication with public DNS resolvers (google, azure, Cloudflare).

Regards, Jayaprakash M

3개 답변
1

What did you see to determine that it is communicating with the public DNS resolver?
Are there any DNS settings in "/etc/resolv.conf" of EC2?

profile picture
전문가
답변함 10달 전
  • From Guard duty findings. it is windows instance and we did not change any network settings.

0

As well as Riku Answer something to ask here:-

This can also depend on if your DNS lookups from your EC2's are recursive DNS lookup is where one DNS server communicates with several other DNS servers, contrast to an iterative where the client communicates directly with each DNS server involved in the lookup.

If for example, you are running BIND or Windows DNS Server on your EC2, you most likely will see DNS Lookups accessing the public internet depending on how they are configured. (Forward or not)

Amazon Route 53 is both an Authoritative DNS service and Recursive DNS service. 
Authoritative DNS contains the final answer to a DNS query, generally an IP address. 
Clients (such as mobile devices, applications running in the cloud, or servers in your datacenter) don’t actually talk directly to authoritative DNS services, except in very rare cases.
Instead, clients talk to recursive DNS services (also known as DNS resolvers) which find the correct authoritative answer for any DNS query.
Route 53 Resolver is a recursive DNS service.
profile picture
전문가
답변함 10달 전
0

Are you seeing DNS queries being send from your ec2 to other dns servers on a traffic capture? if yes, check if the dns service (bind in linux) is on. Normally an ec2 doesn't know any dns servers other than whats provided from the subnet. if it sending DNS queries to other servers then it somehow knows it. Can you run dig and verify the DNS Server ec2 is using?

Pratap
답변함 10달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠