@hey @grunfink @stefano @mms I understood the traditional meaning of "split DNS" is using one set of DNS addresses internally and serving a different set to the Internet.

That way your internal systems can get internal network addresses for hosts in yourdomain.com, meaning the traffic stays private, but the Internet sees only the public addresses of those hosts you choose to expose there.