My environment:
AD: Active Directory with AD integrated DNS (Windows Server 2016), Domain: example.com, only internal domain stuff in DNS
I am owner of Domain example.com and now i want to point to my own dns server(s). I don't want to publish the AD-DNS to the internet.
Is it somehow possible to place a BIND DNS-Server in my DMZ and mirror the AD-DNS infrastructure? Important requirement: BIND must be writeable from external hosts via RFC 2136 and these should be synced to the AD-Integrated internal DNS.
The goal is to make BIND able to write into ad integrated dns zones. (i think master-slave with zone-transfers are not working in this scenario, maybe something like multi-master?)
Thanks!