Skype FB Edge DNS and Hosts Files

[Ammar Hasayen]

So I have three Skype Edge servers each with two interfaces:

External: connected directoly to the internet and has three public IPs with defaut gateway

Internal: connected to the internal network with no default gateway

My Question is :

• Where shall I put my DNS settings , on the internal NIC or external NIC
• Shall the DNS be my internal DNS or public DNS
• What host file entries shall i put.

[#2]

As a general rule, you should set your external interface to use an public DNS server/service, such as Google or your ISP's DNS.

In the host-file you enter the FQDN's of the Front End (and Director Servers if used).

The Edge server will only do inbound communication to the Front Ends, using only one single port (tcp/5061).

Your setup doesn't say anything about using DMZ's, to use firewall access-lists filtering traffic from the Edge internal NIC to the rest of your internal network. You never want the Edge internal NIC connected directly to your internal netwok. The recommended design is using two DMZ's, but never less than one.

I think you really need to consider this part of your design before moving on...