- Newest
- Most votes
- Most comments
Based on your symptoms, it appears you're experiencing DNS resolution issues with your Windows Server 2022 EC2 instance. The fact that you can resolve domains using Google's DNS (8.8.8.8) but not with the AWS-provided DNS (169.254.169.253) indicates a specific issue with the AWS DNS resolver.
The telnet failure to 169.254.169.253 on port 53 suggests connectivity issues to the AWS DNS server. This could be due to several reasons:
-
Security Group or Network ACL restrictions: Verify that your security groups and network ACLs allow outbound traffic on port 53 (both TCP and UDP) to the AWS DNS server.
-
VPC DNS settings: Ensure that DNS resolution and DNS hostnames are enabled in your VPC settings.
-
Windows Server 2022 may have restrictions with the 169.254.x.x address space (Link Local address space): Instead of using 169.254.169.253, try using your VPC's .2 address as the DNS server. For example, if your VPC CIDR is 10.0.0.0/16, use 10.0.0.2 as your DNS server.
-
Check your network configuration: Ensure that your instance is properly configured to use the AWS DNS server. In Windows, you can check this in the network adapter properties.
-
Firewall settings: Check if the Windows Firewall is blocking DNS traffic to the AWS DNS server.
To resolve this issue, I recommend:
- Verify security group and NACL settings allow DNS traffic
- Try using your VPC's .2 address instead of 169.254.169.253
- Check Windows Firewall settings
- Ensure VPC DNS settings are properly configured
Sources
DNS issues with Client VPN connection | AWS re:Post
Unable to Resolve DNS and Access Internet on EC2 Instance | AWS re:Post
answered a year ago
Relevant content
asked 2 years ago
