Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To configure DHCP and DNS in an AWS VPC, choose whether instances should receive AmazonProvidedDNS or your own DNS resolvers through a DHCP option set, associate that set with the VPC, and separately enable the VPC DNS attributes required by your use case. Existing instances may not pick up changed DHCP settings until their leases renew.

Understand the two controls

A VPC DHCP option set provides network configuration to instances, including DNS servers and a domain name. It can also specify NTP servers, NetBIOS name servers and node type, and an optional IPv6 preferred lease time. A VPC can have only one associated option set at a time, though one set can be shared by multiple VPCs. AWS documents a default IPv6 preferred lease time of 140 seconds when no value is configured; this is a lease setting, not a DNS performance measure. AWS: DHCP option set concepts

VPC DNS attributes are separate switches. The DHCP set tells clients which resolver information to use; the attributes control whether the VPC supports Amazon-provided DNS resolution and DNS hostname assignment. Changing one does not automatically configure the other.

Choose the resolver and name-resolution flow

Decision What to determine
Resolver supplied to clients Choose AmazonProvidedDNS or custom DNS servers. AWS cautions that using AmazonProvidedDNS and custom name servers together may produce unexpected behavior. Do not treat the list as a guaranteed ordered fallback; establish which resolver is expected to answer each name.
Private names Decide which resolver is authoritative for workload names and how clients reach it. If using custom DNS instead of AmazonProvidedDNS, AWS says the custom servers must resolve the hostnames workloads need. Verify reachability and forwarding or other resolution paths in your own network design; AWS does not provide them automatically.
Domain suffix Choose a domain name you control if clients need a DHCP-provided domain or search suffix. AWS says, “Only use domain names that you fully control.” Operating systems may handle multiple space-separated domain names differently, so use one controlled domain unless your client fleet has been validated for another arrangement. AWS: Work with DHCP option sets
VPC DNS features Decide whether instances need Amazon-provided private DNS hostnames, public DNS hostnames, Route 53 private hosted zones, or interface endpoint private DNS. These requirements determine the DNS attributes to enable, independently of the DHCP resolver choice.

AWS documents limits of up to four IPv4 DNS servers, or three IPv4 servers plus AmazonProvidedDNS, and up to four IPv6 DNS servers. An operating system may support fewer, so check its resolver limits before specifying a long list. AWS: Work with DHCP option sets

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
ASUS RT-AX1800S Dual Band WiFi 6 Extendable Router, Subscription-Free Network Security, Parental Control, Built-in VPN, AiMesh Compatible, Gaming & Streaming, Smart Home
  • New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna : External antenna x 4. Processor : Dual-core (4 VPE). Power Supply : AC Input : 110V~240V(50~60Hz), DC Output : 12 V with max. 1.5A current.
  • Ultra-fast WiFi Speed – RT-AX1800S supports 1024-QAM for dramatically faster wireless connections
  • Increase Capacity and Efficiency – Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicate with multiple devices simultaneously
  • 5 Gigabit ports – One Gigabit WAN port and four Gigabit LAN ports, 10X faster than 100–Base T Ethernet.
  • Commercial-grade Security Anywhere – Protect your home network with AiProtection Classic, powered by Trend Micro. And when away from home, ASUS Instant Guard gives you a one-click secure VPN.

Inspect the current VPC configuration

Before changing settings, record the VPC’s associated DHCP option set and its DNS attributes. The AWS CLI provides describe-dhcp-options for option-set details and describe-vpc-attribute for DNS attribute inspection. Use the AWS documentation for the command syntax and required identifiers: DHCP option sets and DNS attributes for your VPC.

Create and associate a DHCP option set

  1. Choose the values. Specify the intended DNS servers and, if needed, a domain name. Confirm custom resolvers are reachable from the instances and can resolve the private and public names your workloads require.
  2. Create a new option set. In the AWS Management Console, open VPCs, go to DHCP option sets, and choose Create DHCP option set. Enter the values and create it. The domain name is optional. AWS states, “After you create a DHCP option set, you can’t modify it.” For a later change, create a replacement set rather than attempting to edit the existing one. AWS: Work with DHCP option sets
  3. Associate it with the VPC. In the console, go to VPCs, select the VPC, choose Actions > Edit VPC settings, select the DHCP options set, and save. The CLI operation is associate-dhcp-options; see AWS’s association instructions.

One DHCP option set can serve multiple VPCs, but associating a different set with a VPC replaces its previous association. AWS describes the per-VPC association and option-set workflow in its DHCP option set documentation.

Rank #2
Sale
TP-Link ER7206, Multi-WAN Professional Wired Gigabit VPN Router
  • 【Flexible Port Configuration】1 Gigabit SFP WAN Port + 1 Gigabit WAN Port + 2 Gigabit WAN/LAN Ports plus1 Gigabit LAN Port. Up to four WAN ports optimize bandwidth usage through one device.
  • 【Increased Network Capacity】Maximum number of associated client devices – 150,000. Maximum number of clients – Up to 700.
  • 【Integrated into Omada SDN】Omada’s Software Defined Networking (SDN) platform integrates network devices including gateways, access points & switches with multiple control options offered – Omada Hardware controller, Omada Software Controller or Omada cloud-based controller(Contact TP-Link for Cloud-Based Controller Plan Details). Standalone mode also applies.
  • 【Cloud Access】Remote Cloud access and Omada app brings centralized cloud management of the whole network from different sites—all controlled from a single interface anywhere, anytime.
  • 【SDN Compatibility】For SDN usage, make sure your devices/controllers are either equipped with or can be upgraded to SDN version. SDN controllers work only with SDN Gateways, Access Points & Switches. Non-SDN controllers work only with non-SDN APs. For devices that are compatible with SDN firmware, please visit TP-Link website.

Enable the VPC DNS attributes your workloads need

In the console, open VPCs, select the VPC, choose Actions > Edit VPC settings, set the DNS attributes needed for the environment, and save. AWS also documents modify-vpc-attribute for changing them. Attribute names and behavior are described in DNS attributes for your VPC and the console/CLI steps in View and update DNS attributes for your VPC.

Enable both enableDnsSupport and enableDnsHostnames when you need public DNS hostnames for eligible instances with public addresses, Route 53 private hosted zone resolution, or interface endpoint private DNS. If either attribute is false, the Route 53 Resolver cannot resolve Amazon-provided private DNS hostnames, and public DNS hostnames are not assigned. AWS: DNS attributes for your VPC

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
NETGEAR Nighthawk WiFi 6 Router (RAX36) – Router Only, AX3000 3 Gbps Wireless Speed – Dual-Band Gigabit Internet – Covers 2,000 sq. ft., 25 Devices – Built-in VPN, USB 3.0, Gaming
  • Coverage up to 2,000 sq. ft. for up to 25 devices
  • Ultrafast AX3000 speeds up to 3Gbps with WiFi 6 technology for uninterrupted streaming, HD video gaming, and web conferencing
  • This router does not include a built-in cable modem. A separate cable modem (with coax inputs) is required for internet service.
  • Connects to your existing cable modem and replaces your WiFi router. Compatible with any internet service provider up to 1Gbps including cable, satellite, fiber, and DSL
  • Plug in computers, game consoles, streaming players, and more with 4 x 1G Ethernet ports
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Account for instance lease renewal

Associating a DHCP option set does not force every running instance to adopt it immediately. AWS says changed settings take effect after the DHCP lease renews, which may take a few hours depending on renewal frequency. Where appropriate, request lease renewal from the instance operating system; otherwise allow renewal to occur. Newly launched instances also obtain settings through DHCP. AWS: Work with DHCP option sets

Best Value
Ubiquiti Networks ER-X EdgeRouter X 4-Port Gigabit Router w/ Power Adapter (Renewed)
  • Supports advanced network management Allows configuration of routing, firewall rules, and traffic control features for customized performance.
  • Designed for smooth streaming and online activity Helps maintain stable connections for video streaming, gaming, and multiple devices in use.
  • Compact, Fanless & Energy Efficient
  • PoE Input Support
  • Ideal for High-Performance Networking
Rank #4
Sale
DBIT AC1200 WiFi Router 2.4GHz +5GHz Dual Band MU-MIMO Wireless Internet Router with 4 Gigabit Ethernet Ports, 4 x 5dBi Antennas, Bridge & Repeater Mode, EasyMesh, Guest Network (T18-21K)
  • 𝐀𝐂𝟏𝟐𝟎𝟎 𝐃𝐮𝐚𝐥-𝐛𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐑𝐨𝐮𝐭𝐞𝐫: Dual-band wireless speeds up to 1200Mbps (300 Mbps on 2.4GHz + 867 Mbps on 5GHz). 2.4GHz band can handles some simple tasks like emails or web browsing while bandwidth intensive tasks such as gaming or 4K video streaming can be handled by the 5GHz band
  • 𝗙𝘂𝗹𝗹 𝗚𝗶𝗴𝗮𝗯𝗶𝘁 𝗣𝗼𝗿𝘁𝘀 𝗳𝗼𝗿 𝗪𝗶𝗿𝗲𝗱 𝗥𝗲𝗹𝗶𝗮𝗯𝗶𝗹𝗶𝘁𝘆: Equipped with 1 Gigabit WAN and 3 Gigabit LAN ports, this router supports high-speed internet plans and offers ultra-stable connections for your smart TV, gaming console, or PC via Ethernet
  • 𝗧𝗿𝗶𝗽𝗹𝗲-𝗠𝗼𝗱𝗲 𝗙𝗹𝗲𝘅𝗶𝗯𝗶𝗹𝗶𝘁𝘆: Create, extend, and connect. Take full control of your home network—set up a new one, eliminate dead zones, or add wired devices wirelessly
  • 𝗪𝗵𝗼𝗹𝗲-𝗛𝗼𝗺𝗲 𝗖𝗼𝘃𝗲𝗿𝗮𝗴𝗲 𝘄𝗶𝘁𝗵 𝗕𝗲𝗮𝗺𝗳𝗼𝗿𝗺𝗶𝗻𝗴: Four external 5dBi high-gain antennas and advanced Beamforming technology concentrate a strong, reliable Wi-Fi signal directly to your devices, eliminating dead zones across your home
  • 𝗖𝗼𝗻𝗻𝗲𝗰𝘁 𝗠𝗼𝗿𝗲 𝗗𝗲𝘃𝗶𝗰𝗲𝘀 𝘄𝗶𝘁𝗵 𝗠𝗨-𝗠𝗜𝗠𝗢: MU-MIMO technology allows the router to communicate with multiple devices simultaneously instead of one-by-one. This drastically reduces lag and ensures a smooth experience for everyone on the network

Verify resolution from an instance

  1. Check the instance’s effective resolver configuration and domain/search suffix after the lease has renewed. Confirm it reflects the intended DHCP option set rather than relying only on the VPC console association.
  2. Test resolution for the exact private names your workloads use, then test public names if required. This distinguishes a client receiving the wrong resolver from a resolver lacking the necessary records or forwarding path.
  3. For public hostname, private hosted zone, or interface endpoint private DNS issues, verify both VPC DNS attributes as well as the client’s resolver configuration.
  4. If results are stale, confirm lease renewal and repeat the checks before changing unrelated DNS settings.

Troubleshoot common failures

  • Instances cannot resolve names: Check that a DHCP option set is associated, that it supplies a usable DNS server, and that the chosen server can resolve the required names. AWS says omitting the DHCP option set disables domain name resolution.
  • Internet access fails in a VPC with an internet gateway: AWS warns that the DHCP domain-name-servers setting needs an appropriate DNS server; otherwise instances may lack DNS access and internet access will be disabled. AWS: Work with DHCP option sets
  • Amazon-provided private DNS or public hostnames do not work: Inspect both enableDnsSupport and enableDnsHostnames; DHCP association alone does not enable these behaviors.
  • Only some instances show the change: Compare their effective DHCP lease and resolver settings. Running instances may not have renewed yet.
  • Custom names resolve inconsistently across operating systems: Check each OS’s handling of domain suffixes and supported resolver count. Prefer one controlled domain and a resolver design tested on the actual client mix.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.