We have a windows 2012 domain with 2 different sites connected via vpn.
Site 1 has a dc with dns, Site 2 has two dc with dns
Most dns zones are integrated into AD, so a change is reflected on all 3 dns.
Site 1 and Site 2 have both more subnets (please consider a lan and dmz) while the vpn links only lan to lan. In both dmz there are servers which are accessible from internet so there is no need to add other vpn for every combination of subnets between the sites.
What I would like to achieve is to access a dmz server through its private address if I'm in the same site, through the associated public ip if it is in the other site.
So name resolution should be different based on the site where the client is. May be I can create zones not integrated in AD, so they can be different on each dns.
I assume clients on site1 will ask dns on site1 first, otherwise this configuration will not work.
Site 2 has two dns: do I have to manually align them for non AD integrated zones ? Can I do something magic with primary/secondary/stub zones ?