GCP Private Zone DNS BIND Config with OpenVPN

README

1. Setup Openvpn server with server.conf.

2. Choose your DNS server:
Bind:
Use named.conf.options in /etc/bind/
CoreDNS
Use Corefile

-- For use with Tunnelblick --
On Tunnelblick's "Advanced" settings page:
- Please tick "Allow changes to manually-set network settings"

Corefile

.:53 {
    forward . 169.254.169.254
    log
}

named.conf.options

options {
        directory "/var/cache/bind";
        recursion yes;
        allow-query { 10.0.0.0/0; };
        forwarders {
                    169.254.169.254;
        };
        forward only;
        dnssec-enable no;
        dnssec-validation no;
        dnssec-lookaside auto;
        auth-nxdomain no;
        listen-on-v6 { any; };
};

server.conf

port 1194
proto tcp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DNS 8.8.8.8"
push "route 10.0.0.0 255.0.0.0"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem