Brian Brookman

@bcbrookman.bsky.social

IT engineer and Kubestronaut in orbit above Southern California. Helps people build and operate scalable, resilient infrastructure.

Anyone successfully implement split-horizon #DNS with #DoH or #DoT? I’ve considered using NAT internally to redirect queries to an internal resolver, but then the problem is you’d need the same certs/keys on both internal and external resolvers, which likely means exposing an open public resolver.