AWS Route53 Flashcards
What is Route53?
It is an external or internal DNS service (not a server)?
Can I use Route53 for on-prem when I have a direct connect?
No, the request has to come from inside AWS networking.
What is an internal hosted zone?
It is a Route53 zona that can act as a DNS service for the VPC.
I have many instances in a VPC and I want and existing already provided www.ms.com to point to a different IP, what cna I do?
You could set up a Route53 internal zone for ms.com, create a www A record to point to the new IP.
Is is the Route53 Resolver used for?
It is a regional service that enables you to route DNS queries between on-prem and your VPC so they can be resolved by Route53. And also between your VPC and your on-prem so instances can resolve again on-prem DNS.
How does the Route53 Resolved work?
It enables you to create an Inbound Endpoint that can be accessed from the on-prem network.
When I create a Route53 Resolver, is it only deployed to a single availability zone?
No, the Route53 Resolver is deployed to tow subnets in two availability zones where you specify two servers to resolve again.
What is a Route53 Resolved inbound endpoint?
It is an endpoint create do=in two separate availability zones that enable on-prem servers to resolve again Route 53.
What is a Route53 Resolved outbound endpoint?
It is an endpoint, created in two subnets in two availability zones that enables DNS queries to be forwared to on-prem DNS server.
I am using a Ropute53 Resolver but I want to be able to forward only some queries to on-prem, is the possible?
Yes, use the Route53 Resolver Forwarding rule.
Can I access Route 53 private zone sform on-prem?
Yes, you can use the Route 53 Resolved to forwared queries. This used to not be the case until 2019.
What is a Route 53 resolver?
It is an endpoint that is placed in a subnet in two AZs that enables open-prem to use the route53 service.
I have an on-prem DNS server, how do I make the instance in my VPC get access to this on-prem DNS?
I create an outbound Route53 resolver.
I have a VPC with two subnets, I also have a VPN connection to my on-prem, when I try to resolve the hostnames of the instance from on-prem I get the public IP, I want the private IP, what options do I have to resolve this issue?
I cna create an incoming Route53 resolved that will act as a proxy in by subnets, I cna ten add this DNS resolved as a DSN server on my on-prem a and set up on forwarding rules. This will enable;le the on-prem DNS server t use the resolver to get the information.
Are Route53 resolvers highly available?
Yes, when you create one you will be asked to select two subnets in two separate availability zones.
I wnat to log all queries to my public Route53 DNS server, how can I architect this?
You can set up Route53 to send its DNS queries to CloudWatch logs.
I need to register a domain, how can I do this in AWS?
You can use Route53 to register a domain.
What is the difference between a public and private hosted zone?
- The private hosted zone has an endpoint in your VPC
- The public hosted zone has an endpoint that is on th internet.
What is a recordset?
It is a subdomain entry that holds a pointer t the iP for example.
What is a quad-A record?
It is an ipv6 A record.
What is an alias record in Route53?
It is an A record that points at an AWS service if the service IP updates it will be updated in Route53.
What is a routing policy?
Enables you to define how the incoming DNS request will be handled by Route53, there are options,
- Simple routing
- Failover routing
- Geolocation routing
- latency-based routing
- Weighted
- Multi answer
What are the types of routing you can have?
- Simple routing: No special routing just respond with records, Like www.keith-tobin.com responds with 33.44.33.44
- Failover routing: Rote traffic to a healthy resource, unhealthy resources receive no traffic
- Geolocation routing: Lets you send traffic from EU user to say Frankfort and US user to use-east01
- latency-based routing:
- Weighted
- Multi answer
Is it possible for an alias record to point to an ‘A’ record?
Yes, 100%, when you select the alias you get the option to select existing recordset (hosted zone record).