{
  "number": 8598,
  "title": "Split DNS Configuration for the Internet Key Exchange Protocol Version 2 (IKEv2)",
  "authors": [
    "T. Pauly",
    "P. Wouters"
  ],
  "published": "2019-05",
  "status": "Proposed Standard",
  "stream": "IETF",
  "area": "sec",
  "working_group": "ipsecme",
  "pages": 16,
  "formats": [
    "TXT",
    "HTML"
  ],
  "abstract": "This document defines two Configuration Payload Attribute Types (INTERNAL_DNS_DOMAIN and INTERNAL_DNSSEC_TA) for the Internet Key Exchange Protocol version 2 (IKEv2). These payloads add support for private (internal-only) DNS domains. These domains are intended to be resolved using non-public DNS servers that are only reachable through the IPsec connection. DNS resolution for other domains remains unchanged. These Configuration Payloads only apply to split- tunnel configurations.",
  "keywords": [
    "IKEv2",
    "DNS"
  ],
  "draft": "draft-ietf-ipsecme-split-dns-17",
  "doi": "10.17487/RFC8598",
  "urls": {
    "html": "https://rfc.dk/rfc8598/",
    "text": "https://rfc.dk/rfc8598.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc8598",
    "datatracker": "https://datatracker.ietf.org/doc/rfc8598/"
  },
  "text_modified": "2019-05-28T23:13:02.610873281Z"
}