Skip to content

Accessing domain in public hosted zone within VPN

0

Hello Everyone , A little background to how the environment is set up. Initially all our domains are in private hosted zone and we configured the resolver using the steps in this post https://repost.aws/knowledge-center/route53-private-hosted-zone. Now we have created a endpoint in public hosted zone with we want to access within the ClientVPN and outside the ClientVPN. So far we have only been able to access outside the VPN and within always failed. I will appreciate any assistance on the best way to make this domain accessible both within and outside teh VPN.

Regards

asked 2 years ago332 views
3 Answers
2

Did you go over the steps mentioned in this article to ensure you have everything needed for the ClientVPN to resolve resources in your private hosted zone: https://repost.aws/knowledge-center/client-vpn-resolve-resource-records

AWS
EXPERT
answered 2 years ago
EXPERT
reviewed 2 years ago
AWS
EXPERT
reviewed 2 years ago
  • The private hosted zone domain is working fine within the VPN. We want the public hosted zone domain to be able to work within and outside the ClientVPN

0

If you need to access Private hosted zone using Client VPN Endpoint, you need to ensure the Client VPN Endpoint is using VPC DNS server (.2) of the VPC in its configuration and ensure the clients, when connected to Client VPN Endpoint are honoring the DNS settings provided by Client VPN Endpoint. Public hosted zone resolution with/without the VPN should technically work using any DNS Server.

AWS
answered 2 years ago
0

When you say you cannot access the endpoint in the public hosted zone, do you mean you cannot resolve the DNS name or connect to the server? Firstly you can check if you can resolve the public DNS name within the ClientVPN using commands like - nslookup domain-name. If you can resolve the DNS name within ClientVPN (most likely you should as its using AWS resolver), then it should be network connectivity issue, for example, the subnet your client VPN endpoint is hosted does not have a route to the internet, or it is being blocked by NACL etc.

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.