Scenario

The popularization of networks makes office work faster and easier. However, the phenomenon that employees access the Internet for non-working purposes becomes more and more serious. Most enterprises generally face the serious problem of computer and Internet abuse. Online shopping, online chatting, playing games, and other activities not related to work occupy the limited broadband and seriously affect work efficiency. You may need to optimize the management of the network resources of your organization, improve the overall work efficiency, and avoid the leakage of confidential information, commercial information, and scientific research achievements.

Solutions

You can use Intranet DNS to control users' online behavior. For example, if you want to block user access to Baidu under the VPC named vpc-newDNS, you can configure an intranet DNS.

First, associate the intranet DNS with vpc-newDNS, and ensure that the DNS resolution service can take effect on the resources under the VPC. Then, add an A record on the intranet DNS server for the domain name of Baidu (such as baidu.com), and set the IP address to 0.0.0.0. After the configuration is complete, when a user within the VPC accesses Baidu, the intranet DNS returns 0.0.0.0 to block access to Baidu.

Procedure

Log in to the Intranet DNS console.
Click at the top of the page, and select a region. In this case, select Huadong1.
Click Create Intranet Domain Name.
In the Create Intranet Domain Name dialog box, set Domain Name and VPC as shown in the following figure, and then click OK.
Find the intranet domain name you created, and click Manage Record Sets in the Operation column. The Parse Records page appears.
Click Add Record Sets in the upper-right corner, configure the record set as shown in the following figure, and then click OK.
After the record set is added, users within vpc-newDNS are blocked from accessing Baidu.
Set the DNS service address of the cloud server to the intranet DNS address. For more information, see Modifying the Host DNS to Make the Intranet DNS Configuration Take Effect.