How Private subnet communicates with external dns in firewall applied environment?

Question

I run EC2 Instance in Private Subnet.
The Instance should communicate with external dns(not AWS Resources).
In Private Subnet, the instance doesn't communicate with the dns because of firewall.
How can I get dns ip address?
Should I set NAT Gateway and run Squid(Proxy) in Public Subnet? 
What is different best way to communicate with external dns?

Answer

You can set up an AWS-managed NAT Gateway and route internet-bound traffic from your Private Subnet to it. Then set up a Route 53 Resolver Outbound Endpoint to forward DNS queries (optionally conditionally) to your external DNS server.

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html

How Private subnet communicates with external dns in firewall applied environment?

相關內容