How to resolve private Route53 zone through VPN?

Question

openvpn

There is a private Route53 zone, which resolves perfectly inside the corresponding VPCs.
There is an OpenVPN Access Server in one of the VPCs.
What should I do to make OpenVPN clients see this private zone?
Route53 inbound endpoint? Something other?

UPDATE: Enabling "Have use the same DNS servers as the Access Server host" OpenVPN server does work, but I'd like to leave users its DNS servers and only use Amazon 's for certain zones.

Answer 1

You can put a local DNS server on the client side, which can resolve one zone from a specific server, and the rest from the default server. The standard OS resolver cannot do this, but dnsmasq can.
From dnsmasq.conf:
# Add other name servers here, with domain specs if they are for
# non-public domains.
server=/localnet/192.168.0.1
server=8.8.8.8