---
title: "Complete fields to configure DNS Resolving for a Site"
slug: "dns-resolving-v6-7"
description: "Configure DNS resolving, host resolving, and zone transfers for a Site to optimize your Gateway's performance and IP address management."
tags: ["DNS Resolver", "Host Resolving", "Site", "Site Configuration", "Zone Transfers"]
updated: 2026-03-16T19:52:03Z
published: 2026-04-03T16:41:06Z
canonical: "support.appgate.com/dns-resolving-v6-7"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# DNS Resolving

The DNS resolver is explained in more detail in the [DNS and name resolvers](/v1/docs/dns-and-name-resolution-v6-7) section. Complete the fields in the DNS Resolving section of the **Add/Edit Site** page to configure DNS resolving for a Site:

> [!NOTE]
> **NOTE**
> 
> In the case of cloud environments, a DNS server may not be required as [cloud resolvers](/v1/docs/cloud-resolvers-v6-7) use cloud APIs and these return the required IP addresses directly.

- ***Host Resolving.*** The hosts file on the Gateway appliances will be used to resolve hostnames within entitlements. Add hostnames to the *Hosts File* in the Miscellaneous tab of the appliance configuration. For details, see [Configure appliance](/v1/docs/miscellaneous-v6-7).
- ***DNS Resolvers.*** To allow a Gateway to resolve users' entitlements out of the box, a limited default DNS resolver is included. As you add more, you can set the order in which they are tried using the up down arrows. The use of the `dns://` syntax is supported in entitlement actions. Refer to [Defining hosts](/v1/docs/iphostnames-v6-7#hostnames-dns) for more information about this syntax.

- *Perform AAAA lookups.* IPv6 addresses will be resolved (as well as IPv4). AAAA look ups are disabled by default to improve system performance.
- *Update Interval (seconds).* DNS resolver polling frequency (seconds) to get the latest IP address information. This will affect how quickly the Gateway will respond to changes. Defaults to 60 seconds.
- *Match Domains (Zone).* When there is a match domain set, this DNS resolver will only be used for matching DNS names. This eliminates any unnecessary DNS look-ups. When no match domain is set, this DNS resolver is used for all DNS look-ups. The match domain will also be used as the 'zone' when *Zone transfer* is enabled (bee below).
- *DNS Servers.* Enter one or more IP addresses for the DNS server(s). If left empty, the appliances' DNS server settings will be used.
- *Zone transfers (to Gateway).* Delegate DNS to the Gateway for those zones defined in *Match Domains*. Zone transfers are recommended as the DNS resolver can make a lot of DNS requests.

> [!NOTE]
> **NOTE**
> 
> Zone transfers usually requires that the feature be enabled on the DNS server for a specific IP address; in this case the Gateway(s).

- *Client DNS auto-configuration.* Uses this resolver's DNS settings for clients when no other DNS policy exists. A hidden DNS policy will be created (with fallback Site enabled) along with a suitable hidden entitlement. This will be assigned automatically when a user has at least one other entitlement for this Site and no other DNS policy assigned.