Now that Microsoft has won the huge DOD JEDI contract, we’re looking at the DNS options available for agencies looking to migrate. While Azure DNS service is designed specifically for use in the cloud, it’s far more likely that agencies will try to operate in the JEDI cloud using the Microsoft DNS they use on prem.
While this default Microsoft DNS may be functioning just fine for your on-prem needs, you’ll soon find yourself running into problems if you use it for your cloud migration, and you’ll run into plenty afterwards.
Here is a breakdown of the reasons why Microsoft DNS isn’t the best choice for a cloud deployment.
It wasn’t designed with complexity in mind
What do Microsoft DNS and the prequel trilogy have in common? They both sound good in theory, but don’t exactly work out in practice. A main issue with Microsoft DNS is its connection with Active Directory – they were looking for a back-end, and DNS was the technology that fit the bill. Unfortunately, many network administrators assume that this connection makes Microsoft DNS appropriate for large networks at scale, when Microsoft never intended to use it in the complicated network architectures of today.
This is not to say that Microsoft DNS can’t serve DNS records; it still works as it should in a simple, single-use environment. When your network starts heading into the cloud, you’re going to need something far more sophisticated to deal with new layers of complexity.
Critical conversations on critical infrastructure
Find out how your peers are managing their networks through profound change. Watch this series of live interactive discussions with IT pros & join the debate in Slack.
Cloud DNS: Benefits and obstacles for hybrid networks
Unsure about cloud DNS services and hybrid-cloud enterprises? Learn more with BlueCat, including why it isn’t so simple for managing networks.
IT pros debate: Who should own DNS in the cloud?
Six networking pros dig into who should own DNS in the cloud during the third Critical Conversation on Critical Infrastructure hosted in Network VIP.
Network admins’ top 10 checklist for holiday prep
From syncing NTP to having readily accessible DNS maps, here are 10 things you can do to keep your networks reliable during the holiday lull.
Temporary workaround for SAD DNS
Ahead of Linux’s patch taking effect, BlueCat Labs has a temporary workaround for protecting against the revived Kaminsky DNS cache poisoning attack.