Oracle Cloud Infrastructure: VCN DNS Domain Name Update - oracle

Is it possible to update the DNS Domain Name label using either the console, CLI or REST API after the VCN has been provisioned? Or will i need to destroy and re-provision the VCN with the correct label?
The issue is that we have 2 VCN's - one in each region (Ashburn and Phoenix), and the DNS Domain Name label on the Phoenix VCN was set identically to that of Ashburn. This is causing an issue while tryin to configure conditional forwarders (e.g. domain name already used up by Ashburn). I was hoping to fix this without re-provisioning the VCN in Phoenix.

Related

I can ping the DC, Domain, IP, but cannot join the domain

So, setting up a brand new domain for the very first time (never set up a brand brand new domain) of Azure boxes (but not AAD - using traditional AD over Azure) trying to get these boxes to communicate has taken me literal days and I am getting very frustrated at these.
DC is VT-EDD-Server
Domain is VT-EDD.local
Client is VT-EDD-IIS1 (I'll have others, but once this is fixed I'll have this solved)
Not sure if I even NEEDED to, but I added the IP for the DC and domain to the client's host file, and now I can ping the server. I have also updated the client's DNS to:
and when I still try to join the domain I get
The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "VTT-EDD.local":
The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)
The query was for the SRV record for _ldap._tcp.dc._msdcs.VTT-EDD.local
Common causes of this error include the following:
- The DNS SRV records required to locate a AD DC for the domain are not registered in DNS. These records are registered with a DNS server automatically when a AD DC is added to a domain. They are updated by the AD DC at set intervals. This computer is configured to use DNS servers with the following IP addresses:
168.63.129.16
- One or more of the following zones do not include delegation to its child zone:
VTT-EDD.local
local
. (the root zone)
I can ping both the DC and the domain by name and IP, but can't join it.
After creating a ADDC in azure, joining the server to it, and adding the DC's IP to the DNS in Azure, I was able to complete the process.

In AWS, how do I configure SSM for an instance joined to an AWS AD Domain in a Private Subnet?

I am trying to set up SSM on Windows.
I have an ASG in a private subnet (absolutely 0 internet access). I can not use NAT, only VPC endpoints.
In the instance launch configuration, I have a PowerShell script that uses Set-DnsClientServerAddress so that the instance can find and join an AWS Managed MS AD service. I would also like to set up the instance so it can be fully managed with SSM.
The problem comes with the DNS Client Server Address.
When I set it to match the address of the AD service SSM will not work.
When I leave the DNS Client Server Address default, SSM works but I can not join the AD.
I tried forcing the SSM Agent to use the endpoints by creating a amazon-ssm-agent.json file and setting all three endpoints in there. This allowed the instance to show on the Managed Instance list, but its status never changed from pending and requests from within the instance still timed out.
Does anyone know the magic sauce to get these things all working at the same time?
EDIT 1:
I also tried adding a forward as described in this thread, however I'm either missing somethign or it is not working for my case:
https://forums.aws.amazon.com/thread.jspa?messageID=919331&#919331
It turns out that adding the forwarder as described in the link above worked. The part I was missing was joedaws comment, "I would also remove the existing 169.254.169.253 entry so that only the 10.201.0.2 ip address is in the list".
Of course, my IPs are different, but once I removed the preexisting forward so that my x.x.x.2 IP was the only one in the list (I did this for both of the AD DNS servers) the instance was discoverable by SSM.
So, I would make a minor change to the list that saugy wrote:
On a domain joined windows instance, log in with AD domain Admin user
Open DNS manager
Connect to one of the DNS IP addresses for the AWS AD
Select forwarders
Add the VPC's DNS IP (x.x.x.2 from you VPC's CIDR range)
Remove the existing IP (so you VPCs IP is the only one)
Click Apply
Repeat from step 3 with the other DNS IP address for the AWS AD (not 1
Also, as mentioned in the other post. This only has to be done once and the settings persist in the AD DNS.

How do I add the domain I own in oracle cloud and host it live?

I want to upload my local wordpress to the domain I bought and make it live. But I don't know how to add domain and add dns in oracle cloud.
Unfortunately, there's no simple answer to your question. The general documentation on using Oracle Cloud DNS Service can be found here. Below is a quick summary of tasks that need to be completed:
Note the public IP address assigned to your compute instance that's hosting the web server. Assign one if necessary. The compute instance must be on a public subnet to be assigned one.
In your tenant's root compartment, create a Zone for your domain, e.g. example.com.
Create an "A" zone record, e.g. www.example.com => 123.123.123.123
Publish the record.
On your Registrar's DNS management console, update the name server records to point to Oracle Cloud's name servers assigned to the zone.

How to resolve the domain name I created on domain.com in alibaba cloud SAS?

I have created a SAS in Alibaba cloud with ghost template as the image for SAS. I have also created a domain name on domain.com and now I am trying to configure the domain name to the ghost app running on SAS. But when I add the domain name the Resolution Status for this domain still shows as Unresolved. The below error message is displayed on the top of the console.
Domain name, which uses Alibaba Cloud DNS, can be resolved here directly. Other domain should be resolved manually with corresponding DNS service provider.
I have also added the domain name on Alibaba Cloud DNS so I am not sure why this is still not getting resolved. Any help will be much appreciated.
Contact your registrar to establish an A record that maps your domain name to the IP address of Alibaba Cloud SAS (Simple Application Server).
Refer:
https://www.alibabacloud.com/help/doc-detail/59080.htm

Setting up internal custom domain in AWS EC2 instance

Please help on the below use-case.
We have an AWS EC2 instance with public IP or load balancer DNS --> public.ip or application.lb.amazonaws.com (where we have a custom web apps running as target)
We have another VM instance (e.g.: private.ip) within our Data Center (DC) (where the same web apps is running as source).
We need to have a web based communication between these 2 instances but currently its happening through HTTP. We have already handled all connectivity issues and we are able to now communicate between 2 instances.
We're accessing the source & target URL's as http://public.ip:31415 or application.lb.amazonaws.com:31416
Now we need to convert HTTP URL's in (4) to HTTPS along with a custom domain name. This domain name will not be PUBLIC & it will be resolved only within our office network. E.g Domain name: test.source.apps & test.target.apps
We would be making an entry in our local machine /etc/hosts (similar to below) to have this name resolution in (5) works for now in test & for other environments we planned to make an entry in our internal office DNS servers for this name resolution.
Example /etc/hosts:
Target:
test.target.app public.ip.ec2.server
(or) test.target.app application.lb.amazonaws.com
Source:
test.source.app data.center.ip
We don’t want any paid mode of SSL (like CA or public domain) due to the fact that this URL will be used only by 2 -3 developers and within the office network only. But as part of the security compliance we need to definitely make this a HTTPS URL.
Web apps are running in Jetty web server. We've planned to do it using LetsEncrypt + Custom domain.
Can anyone suggest if this possible in AWS & any steps on how to make this change (i.e. creating subdomain that is internal to our host/network &
using LetsEncrypt SSL)?

Resources