GTM resolver with private self and public listener

Hi,

 

We are configuring some GTM with private IP self address and we use a public IP on the listeners in order to receive plublic dns queries.

 

We are also using this gtm as a validating resolver cache. The listener is using a private IP as it is only used by internal machines. There is a snat with publics IPs on that listener (so response can be routed back to us).

 

The problem I see, is that the gtm queries the root dns servers with its private self IP, so it does not work.

 

Is it possible to use the public snat IP for that ? Or must we change the self IP to public ?

 

regards