DNS in the Cloud: Where, When and Why
Chances are your organization is either working on a cloud strategy or has already implemented one.
The article explains why DNS must be part of any enterprise cloud strategy, describing common cloud adoption scenarios and the operational benefits and risks of moving DNS to cloud-based services. It covers data center replacement and expansion (including hybrid models and on-demand compute) where cloud DNS can improve resilience, scalability, cost-efficiency and disaster recovery, and the challenges PaaS and cloud-based applications face when app teams create isolated DNS copies that break access to enterprise zones. The key outcome is that organizations should design scalable DNS integrations—such as beachhead DNS implementations—to maintain consistency with the data center, enable secure access across VPCs, and support cloud-driven innovation.
Why should DNS be included when planning a move from on-premises data centers to cloud infrastructure?
Including DNS in cloud migration planning is important because DNS underpins service discovery, application connectivity and disaster recovery. Moving infrastructure to the cloud for IaaS brings benefits like resilience, flexibility and scalability, but failing to adapt DNS can break access to internal hosts and enterprise zones. The article emphasizes that cloud-based DNS services can align with those benefits—supporting rapid scalability and on-demand models—while avoiding over-provisioning and ensuring services remain reachable and consistent with the enterprise data center during and after migration.
How can cloud DNS support hybrid cloud or data center expansion scenarios?
In hybrid cloud or expansion scenarios, cloud DNS can be deployed as an on-demand service that reduces cost by only running when overflow compute is required. When additional compute is added in virtual data centers or used as an overflow for capacity shortfalls, DNS in the cloud allows users and applications to consume resources without needing to know whether they’re local or cloud-based. This approach delivers service continuity to the business, enables elastic scaling for unpredictable workloads, and integrates with existing data center DNS to preserve operational consistency.
What problems do platform-based applications face with DNS in public cloud platforms, and what is a recommended pattern to address them?
Platform-based applications often attempt to use local or open-source DNS within a public cloud environment, quickly encountering issues resolving internal hosts or accessing enterprise DNS zones; teams then copy records locally, which leads to breakage or security holes. The article recommends creating a scalable mechanism that allows cloud platform applications to leverage enterprise DNS without copying records. One pattern described is a ‘beachhead’ DNS implementation that serves as a conduit between isolated virtual private clouds and the enterprise data center, enabling deployment of services that maintain DNS consistency and secure communications.
Chances are your organization is either working on a cloud strategy or has already implemented one.
No matter what industry trend data you reference, the percentage of companies adopting cloud as an essential part of their digital transformation strategy is huge, and growing rapidly. Corporate IT strategies are centered around cloud more than any other initiative. In fact, it is the #1 investment for most IT budgets now and will be for the next few years.
CIOs are looking to the cloud and its many services to improve and innovate their business. Workloads are being moved to the cloud to leverage the convenience of rapid scalability and an on-demand cost model. In fact, IDG predicts that by 2018, the typical IT department will have the majority of their apps and platforms (60%) residing in off-premise systems. Enterprises are leveraging cloud infrastructure to drive innovation, to speed up new product development and deployment, and to potentially gain entry to a new industry or market.
They are also looking at how cloud can evolve their data center, and DNS should be a critical part of this analysis. There are several scenarios where deploying cloud-based DNS services can benefit an organization:
Data Center Replacement
Moving on-premises infrastructure to the cloud is a popular initiative that most enterprises consider when looking at cloud implementation options. This is a prime example of using cloud for Infrastructure as a Service (IaaS). Obvious benefits include resilience, flexibility, scalability, and disaster recovery. The cloud can also have cost benefits, particularly when running more unpredictable workloads that need to be ramped up or ramped down quickly, which tend to be over-provisioned in physical data center environment.
Data Center Expansion
Oftentimes data center expansion is implemented through a hybrid cloud strategy, or by simply adding additional compute in a virtual data center running in the cloud. In the latter scenario, it’s often about adding infrastructure in the cloud for workloads where additional jobs need to be run. In a hybrid cloud strategy, compute might be used only as an “overflow” mechanism when there is not enough compute or storage in existing data centers. In this scenario, DNS services running in the cloud can result in cost-savings as they don’t need to be running all the time, only on-demand. Users who need access to compute resources don’t need to know where resources come from (be it local or cloud). It’s really all about delivering the service to the business.
Cloud Based Applications
As enterprises shift data-intensive workloads to the cloud, Platform-as-a-Service (PaaS) adoption is expected to be the fastest-growing sector of cloud platforms. When organizations begin to build applications on a public cloud service, app builders might create their own DNS service using either a cloud-based DNS service or an in-house open source-based solution. Inevitably, the app builders run into issues where they need to resolve internal hosts or access the enterprise’s broader DNS zones. Following this, they must the copy records that they need locally, and it’s only a matter of time before the application breaks.
It’s critically important to create a scalable way to allow platform-based applications to utilize the enterprise’s DNS without copying or creating security holes. In a situation where the different virtual private clouds cannot communicate with one another, a “beachhead” DNS implementation can be enabled to effectively communicate with the rest of the data center. Services can then be easily deployed via the beachhead to act as the conduit between the cloud platform service and the enterprise data center.
As companies continue to look at the cloud as a way to help enable innovation, they must also consider DNS to ensure consistency with the rest of the data center and the role it plays in creating the innovation that they want to achieve.