DNS resolution in Azure Virtual Network

Question

Hello,

I have following query,

If Azure Virtual Network has been configured with Custom DNS Server settings. Custom DNS Server is at Onpremise Network. If there are Azure Private DNS Zones created to host DNS A record for private endpoint for PaaS resources and these DNS Zone is linked to Azure Virtual Network then whether query for private endpoint URL will get resolved by Private DNS Zone or it will get forwarded to Custom DNS Server at Onprem.

Answer 1

@Raviraj Velankar ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

If you were to update the DNS Server of the Azure VNET to a custom DNS Server residing at OnPrem,

• All the DNS Queries would go to the OnPremises DNS Server only
• Even the DNS queries of PaaS Services will be forwarded to the OnPrem DNS Server.
• It does not make sense to have the Private DNS Zone linked to a VNET which uses a custom DNS Server.

In such scenarios,

• It is recommended to use the Azure Private DNS Resolver.
• You should use Azure Private Resolver directly for VMs located in Azure
  • And use Azure DNS forwarding ruleset to forward queries to OnPrem that are not covered by Azure Private DNS Zones
• And for OnPrem servers, you should forward the DNS requests from the OnPrem DNS Server to the Azure Private Resolver using a conditional forwarder.
  • See : Azure Private Resolver with on-premises DNS forwarder

You can create such a hybrid DNS architecture as defined in Resolve Azure and on-premises domains

Thanks,

Kapil

---

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.