Recursive DNS Resolution

Recursive resolution + internal WAN resources

No DNS modification
  

2620:1d5:0:1000::2
10.19.2.2

2620:1d5:100:1000::2
10.27.2.2

Safe Search
(Google, Bing, DuckDuckGo)

2620:1d5:0:1000::3
10.19.2.3

2620:1d5:100:1000::3
10.27.2.3

Safe Search + YouTube Moderate
  

2620:1d5:0:1000::4
10.19.2.4

2620:1d5:100:1000::4
10.27.2.4

Safe Search + YouTube Strict
  

2620:1d5:0:1000::5
10.19.2.5

2620:1d5:100:1000::5
10.27.2.5

MS-ISAC MDBR

2620:1d5:0:1000::10
10.19.2.10

2620:1d5:100:1000::10
10.27.2.10

MS-ISAC MDBR + Safe Search
(Google, Bing, DuckDuckGo)

2620:1d5:0:1000::11
10.19.2.11

2620:1d5:100:1000::11
10.27.2.11

MS-ISAC MDBR + Safe Search + YouTube Moderate

2620:1d5:0:1000::12
10.19.2.12

2620:1d5:100:1000::12
10.27.2.12

MS-ISAC MDBR + Safe Search + YouTube Strict

2620:1d5:0:1000::13
10.19.2.13

2620:1d5:100:1000::13
10.27.2.13

For recursive resolution without internal WAN resources, please contact us.

More Information

IU13 hosts a pair of high performance DNS servers that provide recursive resolution and caching for internal WAN member resources and the Internet.

It's our recommendation that WAN members forward requests from their on-premises DNS servers to the WAN forwarders.  The WAN forwarders contain conditional forwarders for internal WAN member domains so that computers on the WAN can resolve IP addresses for services not published in public DNS.

If you are using Securly or another content filtering solution that involves DNS, feel free to get in touch with the WAN team to discuss design options.

If you would like WAN members to be able to resolve your internal domains, please open a ticket.


We provide options for Safe Search enforcement (Google, Bing, and DuckDuckGo) and YouTube restricted mode.  The Safe Search resolvers also disable iCloud Private Relay. If you plan to enforce Safe Search, you should block other search engines to prevent circumvention. To effectively enforce YouTube Restricted Mode, you should also properly configure Restricted Mode settings in the Google Admin Console. More information is available here.


If you have public address transit (eBGP) to the WAN, please contact us for more information.