title: How to resolve resource records in the private hosted zone created within Route53 over WireGuard VPN
body: <p>I created the WireGuard VPN tunnel which works fine, but local hosts are accessible only by the IP address. I would like to use a private hosted zone as well as to give to every host static name, so I can access hosts by FQDNs like &quot;myhost.myprivatesubdomain.mydomain.com&quot; for example.</p>
  <p>I found in the AWS documentation, that I can do it by using Route53, but to achieve it I need to create the  &quot;Client VPN endpoint&quot;. The procedure is well explained but there is a catch, the cost per hour associated with the endpoint is something like $0.15/h (~$100/month). Quite a lot for such a simple service.</p>
  <p>I think there are a few ways how to do it.</p>
  <ul>
  <li>keep Route53 for the public zone and use for example UnBound DNS server for the private host zone.  (not sure for that)</li>
  <li>creating own DNS and remove Route53 in full (a lot of work but doable)</li>
  </ul>
  <p>The best could be if I can keep in the Route53 the private zone setup and use the additional DNS server just to handle this ENDPOINT issue! (not sure is that actually possible)</p>
  <p>I am not very skilled in DNS setup, so I have been trying to find the internet resource that treats such a case, but without success.</p>
  <p>Could anyone point me in the right direction, please?</p>
  <p>Thanks in advance.</p>