Multiple DNS Search Domains

max · April 15, 2021, 3:38pm

Please allow multiple DNS search domains. Many businesses and my home lab use multiple internal domain names. I have a .dev and a .lab domain. Having multiple search domains is pretty important to allowing connectivity.

I’d like to see a search domain tied to a specific DNS server, and multiple search domains tied to a specific DNS server.

e.g.

home.dev
10.10.0.1
home.lab
172.16.0.1

or

home.dev, home.lab
10.10.0.1

Thanks!

zt-grant · April 15, 2021, 7:33pm

Currently we only support a single search domain per network, so that’s not possible at the moment. We have additional DNS features in the works. No publicly available info of exactly what & when as of yet.

As a solution for now, you could just use multiple networks, each with its own DNS config.

max · April 15, 2021, 7:52pm

That’s why this is in Feature Request

jheidecker · January 12, 2022, 2:28pm

I get the feeling like this is not moving because of difficulty in making it work across different client OSes. I have only looked into Windows. On the client side, the registry key that is being modified is a multi_sz and can take more than one string. Tested, and works like a charm!

github.com

zerotier/ZeroTierOne/blob/e8f7d5ef9e7ba6be0b2163cfa31f8817ba5b18f4/osdep/WinDNSHelper.cpp#L338

    
      
          			char nwString[32] = { 0 };
          			sprintf(nwString, "%.16llx", nwid);
          			RegSetKeyValueA(dnsKey, NULL, "Comment", REG_SZ, nwString, strlen(nwString));
          
          
			DWORD configOpts = 8;
          			RegSetKeyValueA(dnsKey, NULL, "ConfigOptions", REG_DWORD, &configOpts, sizeof(DWORD));
          			RegSetKeyValueA(dnsKey, NULL, "DisplayName", REG_SZ, "", 0);
          			RegSetKeyValueA(dnsKey, NULL, "GenericDNSServers", REG_SZ, serverValue.data(), serverValue.length());
          			RegSetKeyValueA(dnsKey, NULL, "IPSECCARestriction", REG_SZ, "", 0);
          			std::string d = "." + std::string(domain);
          			RegSetKeyValueA(dnsKey, NULL, "Name", REG_MULTI_SZ, d.data(), d.length());
          			DWORD version = 2;
          			RegSetKeyValueA(dnsKey, NULL, "Version", REG_DWORD, &version, sizeof(DWORD));
          		}
          	}
          }
          
          
void WinDNSHelper::removeDNS(uint64_t nwid)
          {
          	auto hasConfig = hasDNSConfig(nwid);
          	if (hasConfig.first) {

Of course, this would require controller changes, etc. but this is a very important feature for me for ease of deployment. The multiple network solution is a terrible idea (sorry it is,) because it multiplies node counts and complexity for no good reason.

tonirug · March 17, 2023, 5:09pm

Hello,
having multiple search domains would be very appreciated. In my company we have two internal domains. I would like to adopt ZeroTier for the company because it is a great software but this limitation is stopping the adoption.

zt-grant · March 17, 2023, 8:42pm

This feature is in the backlog. A workaround for now would be to have clients join 2 networks; one for each DNS search domain configuration.

tonirug · March 18, 2023, 10:06am

Hello Grant,
thanks for your suggestion. I have configured a second network with just DNS search domain and server. No IP address auto-assignment, no managed routes.
Joined it from my client and now resolves the names of both search domains are resolved.