Microsoft DNS Integration

Customer Preview

The Microsoft DNS integration is currently in customer preview and is not yet generally available. Contact support@netboxlabs.com to join the preview.

Overview

The Microsoft DNS integration discovers forward-lookup DNS zones from a Windows Server DNS and ingests them into NetBox via the Diode pipeline. A and AAAA records are imported as IP address objects with their fully qualified domain names. When multiple DNS names resolve to the same IP address, the alphabetically first name is set as the primary DNS name and any remaining names are stored in a custom field.

What Gets Synchronized

• IP Addresses - from A records (IPv4) and AAAA records (IPv6) across all forward-lookup zones

Technical Info

For full details of Microsoft DNS to NetBox object and attribute mappings, see the Technical Info section.

Key Features

• DNS record discovery - retrieves A and AAAA records from all non-reverse, non-autocreated forward-lookup zones on the target Windows DNS Server
• Multiple DNS name support - when more than one DNS name resolves to the same IP, the alphabetically first FQDN is set as dns_name; additional names are stored as JSON in the msft_dns_additional_names custom field
• Zone filtering - include or exclude specific zones using glob patterns; exclude always takes precedence over include
• Scheduled synchronization - configurable cron schedule keeps NetBox current with your DNS data
• WinRM connectivity - connects to the Windows DNS Server over WinRM using NTLM authentication; no agent software is required on the target server
• NetBox Assurance integration - discovered data is staged as deviations in NetBox Assurance for review before being written to NetBox
• Bootstrap mode - creates the required custom field in NetBox before the first full sync

Integration Architecture

The Microsoft DNS integration is built using the NetBox Labs controller integrations framework:

• Standardized integration pattern - consistent approach across all controller integrations
• NetBox Assurance integration - uses NetBox Assurance for safe data ingestion and deviation management
• Agent based - runs as part of the NetBox Discovery agent ecosystem using the Orb Agent Pro image
• One-way sync - data flows from Microsoft DNS Server to NetBox only; no changes are written back to the DNS server

Compatibility

Supported NetBox Versions

• NetBox Cloud and NetBox Enterprise v4.2.3 and later with NetBox Assurance

Supported Windows Server Versions

• Windows Server with the DNS Server role installed and WinRM enabled