Question

A company is deploying a Route 53 Resolver inbound endpoint so that on-premises DNS servers can resolve records in a private hosted zone. The network team wants the endpoint to remain available even if a single Availability Zone experiences an outage, and they need to provide the on-premises resolvers with the correct forwarding targets. Which implementation approach meets these requirements?

Accepted Answer

Create the inbound endpoint with IP addresses specified in at least two subnets in different Availability Zones, and configure the on-premises DNS servers to forward queries to the resolver ENI IP addresses.

Answer

Create the inbound endpoint in a single subnet and place it behind a Network Load Balancer, then point on-premises servers at the NLB DNS name.

Answer

Create an outbound endpoint in two Availability Zones and configure on-premises servers to forward queries to the VPC .2 resolver address.

Answer

Create the inbound endpoint with a single IP address and rely on Route 53 health checks to fail the endpoint over to another AZ automatically.