Tutorial: Configure DNS Settings in Access Server⁠

1. Sign in to the Admin Web UI.

2. Select Access Controls → Internet Access and DNS.

3. Under DNS Server Proxy, select one of the following:

   • Auto (Default) — Clients with domain routing rules have their DNS queries proxied through Access Server. All other clients query the specified DNS servers directly.

   • Always Proxy — Access Server proxies DNS for every client and forwards queries to the DNS servers you configure. (Some Access Server versions label this as Always.)

   • Off — Access Server doesn't alter client DNS behavior. This disables domain-based access rules. (Some Access Server versions label this as Never.)

4. Click Save and Restart.

Access Server 3.2.2 separates DNS server configuration into two distinct settings, now visible as separate fields in the Admin Web UI:

1. In Default Domain Suffix, enter a domain (for example, company.local).

2. Click Save and Restart.

1. In DNS Resolution Zones, click Add another DNS resolution zone.

2. Enter the domain (for example, internal.company.com).

3. Click Save and Restart.

Access Server 3.1.0 introduces built-in domain-based routing using a DNS engine. This allows you to route traffic by domain name without redirecting all traffic or maintaining large lists of IP addresses for content delivery networks (CDNs).

Here's how it works:

• VPN clients use the Access Server's internal DNS engine.

• Specific domains are resolved to private IPs reserved for routing through the VPN tunnel.

• Access Server NATs traffic destined for the actual destination using nftables.

• You can define domains to route (or exclude from routing) on a global, group, or per-user basis.

This allows you to route traffic by domain name without requiring full-tunnel routing.