You can configure Cloud Resolver to forward queries to remote resolvers when they are not resolvable using the cloud provider's REST API. Remote resolvers forward queries to other remote resolving resources, such as functional resolvers or cloud-based DNS servers. Remote resolvers provide a DNS resolution path to resources in networks that are inaccessible to Cloud Resolver.
Attention: Cloud Resolver currently does not support remote resolvers in GCP.
There are two types of remote resolvers:
- Function resolvers—(AWS-only) these are an AWS Lambda that can resolve queries for AWS resources reachable by that Lambda.
- DNS servers—(AWS or Azure) these can be a DNS server, a simple forwarder, or another type of server that accepts DNS queries and can provide a response. These are typically virtual machines that are hosted in the VM service of a cloud provider or container within a container service.
Cloud Resolver uses provided credentials to discover cloud resources in one or more Accounts in AWS, Tenants in Azure, and Projects in GCP. Remote resolvers provide a DNS resolution path to resources in networks that do not belong to discoverable accounts, tenants, or projects. Remote resolvers can be used to resolve resources across multiple clouds instead of requiring API credentials for each cloud environment.