Split-horizon DNS
AssessTechniques
A DNS setup that returns different answers depending on the requester’s network context.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by open-source activity, with 0 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 4Hacker News·7/9/2026open_sourceUsing split-horizon DNS and public CAs for internal TLS
The article argues that internal services can use public-domain names with split-horizon DNS instead of private TLDs and self-signed certificates. It demonstrates a setup using NetBird for DNS routing, acme.sh with Let’s Encrypt for certificate issuance, and nginx as a reverse proxy/WAF to keep internal services protected while maintaining trusted TLS.