Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

AWS Client VPN DNS issues

0

I am testing out AWS Client VPN and have hit the DNS issue. I have Split tunnel setup but get that split DNS is not supported yet. I have an authorization rule setup for my group that is 10.100.0.0/16 which encompasses all of our AWS networking including our AD DNS Servers in AWS. I have 2 DNS servers listed in the Client VPN config and I can hit them with pings and do NSLOOKUPs to them.

But on both Windows and macOS I cannot do ssh server.example.net

I tried adding these directives to the OVPN config: dhcp-option DOMAIN example.net dhcp-option DOMAIN-ROUTE example.net dhcp-option DOMAIN-ROUTE example.com dhcp-option DOMAIN-ROUTE example.us

Route all DNS queries through VPN (for split tunnel)

dhcp-option DOMAIN-ROUTE .

On macOS I see the domain search option example.net now after I vpn. But still cannot run ssh server.example.net, but I can do nslookup server.example.net and get the correct IP.

On Windows I do not even see the domain server option on the whole client or the individual network connection. Its like the directives were ignored totally.

I got one suggestion from AWS Q that I re-do my DNS to be totally different from my public DNS. But thats a huge undertaking and I cannot believe any one would do that. There has to be a better solution.

Topics
Networking & Content Delivery
Tags
AWS Client VPN
Language
English

asked a year ago404 views

1 Answer
0

Since you have AD DNS Servers in AWS is would be best to add your specific DNS entries for server.example.net, example.com & example.us on there if they are not already added.

Usually when you run the SSH command you need to specify the username for example "ssh admin@server.example.net".

You can alternatively use the telnet command and specify port 22 "telnet server.example.net 22" and or a curl -v telnet://server.example.net:22 to confirm that you are able to resolve the IP address of "server.example.net" and can connect to it on port 22.

Additionally your may review the rePost article below [1] for more on how DNS work with my AWS Client VPN.

Sources
[1] - How does DNS work with my AWS Client VPN endpoint? - https://repost.aws/knowledge-center/client-vpn-how-dns-works-with-endpoint

answered a year ago

AWS
SUPPORT ENGINEER

revised a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content