Azure DNS Zone Resolving Issue

Question

Azure DNS Zone Resolving Issue

Shirin Aldarayseh 1

I have an Azure DNS zone, when I tried to set one of Azure NS servers IP address as a primary DNS on my computer, it could NOT to resolve/browse for any record.

Any help/idea please?

GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-13T15:45:09.317+00:00
Hello @Shirin Aldarayseh ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Could you please explain your requirement for better clarity?

Why do you want to set one of the Azure NS servers IP address as a primary DNS on your computer?

Is this computer an Azure VM or your local on-premises machine?

Have you delegated your domain to Azure DNS?

Azure DNS is a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure. You can't use Azure DNS to buy a domain name. By hosting your domains in Azure, you can manage your DNS records by using the same credentials, APIs, tools, and billing as your other Azure services.
For more information, refer the below docs on how to Delegate a domain to Azure DNS:
https://learn.microsoft.com/en-us/azure/dns/dns-domain-delegation
https://learn.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
https://learn.microsoft.com/en-us/azure/dns/dns-troubleshoot#i-cant-resolve-my-dns-record

Regards,
Gita
Shirin Aldarayseh 1 Reputation point

2022-12-14T05:40:17.6+00:00

Hello Gita,

Thanks for the respond.
The answers are as follows:

1,3) I use Azure NS as a primary DNS because this NS is not registered yet (we have another registered DNS and the azure one will be as a stand-by) and it is not public until now so I want to make the test by using web browsing to check if Azure DNS translates domain names to IP addresses and open the web pages.
2) The Computer is on-premises.
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-16T18:01:51.713+00:00

Hello @Shirin Aldarayseh ,

Thank you for the details.

Like I mentioned before, Azure DNS is a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure.

You can configure Azure DNS to resolve host names in your public domain only if you purchased a domain name from a domain name registrar and configured Azure DNS to host that domain.
For example : if you purchased the contoso.xyz domain name from a domain name registrar, you can configure Azure DNS to host the contoso.xyz domain and resolve www.contoso.xyz to the IP address of your web server or web app.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-getstarted-portal

Also, resolving Azure hostnames from on-premises computers would require you to forward queries to a customer-managed DNS proxy server in the corresponding virtual network. That proxy server forwards queries to Azure for resolution.
Refer : https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances

If you want to query Azure DNS private zones from an on-premises environment and vice versa, you can use Azure DNS Private Resolver.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview

Regards,
Gita
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-19T14:58:38.147+00:00

Hello @Shirin Aldarayseh ,

Could you please provide an update on this post to continue further discussion on your requirement?

Regards,
Gita
Shirin Aldarayseh 1 Reputation point

2022-12-21T10:33:02.937+00:00

Hello @GitaraniSharma-MSFT

Sorry for the late reply.
My case is as the following:

We already have a registered domain name like example.com, and it is being used to resolve names, but we now need to have another server to host the DNS zone, we prefer not to go with server option but to go with DNZ Public Zone option.

After creating the azure DNS zone (exapmle.com) and uploading the records of my campus zone, I have tested the azure zone by specifying the Azure DNS Zone NS IP address as the primary DNS of my laptop ( from NIC setting), lets say the main NS IP is *7.70.4.40.

When I use NSlookup with any A record I got a response and the record is resolved successfully even when I open any web page ( which has A record) it would be opened, but the problem is with the records of CNAME type since it is not being resolved correctly.

I wish you could help
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-27T18:46:17.437+00:00

Hello @Shirin Aldarayseh ,

Apologies for the delay in response.

The way you are testing the zone records is not correct.
Generally, you can configure Azure DNS to resolve host names in your public domain only if you purchased a domain name from a domain name registrar and configured Azure DNS to host that domain by delegating the domain to Azure DNS.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

If you are trying to migrate an existing DNS zone hosted on a partner service/Windows DNS/BIND, you can import the DNS zone file into Azure DNS and then use "nslookup" to verify name resolution for the records. If the zone hasn't been delegated yet, you need to specify the correct Azure DNS name servers explicitly in the command as follows : "nslookup www.contoso.com ns1-03.azure-dns.com".
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-import-export

If you want to co-host your domain by using Azure DNS and another DNS provider, you can do so as well.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-faq#can-i-co-host-a-domain-by-using-azure-dns-and-another-dns-provider-

Regards,
Gita
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-01-03T07:47:37.47+00:00

Hello @Shirin Aldarayseh ,

Could you please provide an update on this post for further discussion on this issue?

Regards,
Gita
Shirin Aldarayseh 1 Reputation point

2023-01-03T11:32:13.407+00:00

Hello @GitaraniSharma-MSFT

As I mentioned, we already purchased a domain name many years ago and already have on-premises DNS server that is working fine. My goal is to have a redundant DNS Zone on azure, I created a public DNS zone----> upload the records from my local DNS---->then i tried to test it the way i mentioned in my previous answer.

What would be the proper way to test A, MX, and CNAME records before publishing (delegating) this DNS, just to ensure that all records are resolvable?
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-01-04T10:02:46.9+00:00

Hello @Shirin Aldarayseh ,

As shown in the below doc, you need to use nslookup to verify name resolution for the records. If the zone hasn't been delegated yet, you need to specify the correct Azure DNS name servers explicitly while doing the nslookup as below:
nslookup www.contoso.com ns1-03.azure-dns.com

Refer: https://learn.microsoft.com/en-us/azure/dns/dns-import-export#verify-the-zone

Regards,
Gita

2 answers

Your answer

GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-13T15:45:09.317+00:00

Hello @Shirin Aldarayseh ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Could you please explain your requirement for better clarity?

Why do you want to set one of the Azure NS servers IP address as a primary DNS on your computer?

Is this computer an Azure VM or your local on-premises machine?

Have you delegated your domain to Azure DNS?

Azure DNS is a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure. You can't use Azure DNS to buy a domain name. By hosting your domains in Azure, you can manage your DNS records by using the same credentials, APIs, tools, and billing as your other Azure services.
For more information, refer the below docs on how to Delegate a domain to Azure DNS:
https://learn.microsoft.com/en-us/azure/dns/dns-domain-delegation
https://learn.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
https://learn.microsoft.com/en-us/azure/dns/dns-troubleshoot#i-cant-resolve-my-dns-record

Regards,
Gita
Shirin Aldarayseh 1 Reputation point

2022-12-14T05:40:17.6+00:00

Hello Gita,

Thanks for the respond.
The answers are as follows:

1,3) I use Azure NS as a primary DNS because this NS is not registered yet (we have another registered DNS and the azure one will be as a stand-by) and it is not public until now so I want to make the test by using web browsing to check if Azure DNS translates domain names to IP addresses and open the web pages.
2) The Computer is on-premises.
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-16T18:01:51.713+00:00

Hello @Shirin Aldarayseh ,

Thank you for the details.

Like I mentioned before, Azure DNS is a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure.

You can configure Azure DNS to resolve host names in your public domain only if you purchased a domain name from a domain name registrar and configured Azure DNS to host that domain.
For example : if you purchased the contoso.xyz domain name from a domain name registrar, you can configure Azure DNS to host the contoso.xyz domain and resolve www.contoso.xyz to the IP address of your web server or web app.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-getstarted-portal

Also, resolving Azure hostnames from on-premises computers would require you to forward queries to a customer-managed DNS proxy server in the corresponding virtual network. That proxy server forwards queries to Azure for resolution.
Refer : https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances

If you want to query Azure DNS private zones from an on-premises environment and vice versa, you can use Azure DNS Private Resolver.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview

Regards,
Gita
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-19T14:58:38.147+00:00

Hello @Shirin Aldarayseh ,

Could you please provide an update on this post to continue further discussion on your requirement?

Regards,
Gita
Shirin Aldarayseh 1 Reputation point

2022-12-21T10:33:02.937+00:00

Hello @GitaraniSharma-MSFT

Sorry for the late reply.
My case is as the following:

We already have a registered domain name like example.com, and it is being used to resolve names, but we now need to have another server to host the DNS zone, we prefer not to go with server option but to go with DNZ Public Zone option.

After creating the azure DNS zone (exapmle.com) and uploading the records of my campus zone, I have tested the azure zone by specifying the Azure DNS Zone NS IP address as the primary DNS of my laptop ( from NIC setting), lets say the main NS IP is *7.70.4.40.

When I use NSlookup with any A record I got a response and the record is resolved successfully even when I open any web page ( which has A record) it would be opened, but the problem is with the records of CNAME type since it is not being resolved correctly.

I wish you could help
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-12-27T18:46:17.437+00:00

Hello @Shirin Aldarayseh ,

Apologies for the delay in response.

The way you are testing the zone records is not correct.
Generally, you can configure Azure DNS to resolve host names in your public domain only if you purchased a domain name from a domain name registrar and configured Azure DNS to host that domain by delegating the domain to Azure DNS.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

If you are trying to migrate an existing DNS zone hosted on a partner service/Windows DNS/BIND, you can import the DNS zone file into Azure DNS and then use "nslookup" to verify name resolution for the records. If the zone hasn't been delegated yet, you need to specify the correct Azure DNS name servers explicitly in the command as follows : "nslookup www.contoso.com ns1-03.azure-dns.com".
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-import-export

If you want to co-host your domain by using Azure DNS and another DNS provider, you can do so as well.
Refer : https://learn.microsoft.com/en-us/azure/dns/dns-faq#can-i-co-host-a-domain-by-using-azure-dns-and-another-dns-provider-

Regards,
Gita
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-01-03T07:47:37.47+00:00

Hello @Shirin Aldarayseh ,

Could you please provide an update on this post for further discussion on this issue?

Regards,
Gita
Shirin Aldarayseh 1 Reputation point

2023-01-03T11:32:13.407+00:00

Hello @GitaraniSharma-MSFT

As I mentioned, we already purchased a domain name many years ago and already have on-premises DNS server that is working fine. My goal is to have a redundant DNS Zone on azure, I created a public DNS zone----> upload the records from my local DNS---->then i tried to test it the way i mentioned in my previous answer.

What would be the proper way to test A, MX, and CNAME records before publishing (delegating) this DNS, just to ensure that all records are resolvable?
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2023-01-04T10:02:46.9+00:00

Hello @Shirin Aldarayseh ,

As shown in the below doc, you need to use nslookup to verify name resolution for the records. If the zone hasn't been delegated yet, you need to specify the correct Azure DNS name servers explicitly while doing the nslookup as below:
nslookup www.contoso.com ns1-03.azure-dns.com

Refer: https://learn.microsoft.com/en-us/azure/dns/dns-import-export#verify-the-zone

Regards,
Gita

Answer 1

Hi,

To resolve the records of a private DNS zone from your virtual network, you must link the virtual network with the zone. Linked virtual networks have full access and can resolve all DNS records published in the private zone. You can also enable autoregistration on a virtual network link. When you enable autoregistration on a virtual network link, the DNS records for the virtual machines in that virtual network are registered in the private zone.

Hope this helps.
JS

==
Please Accept the answer if the information helped you. This will help us and others in the community as well.

Answer 2

Depending on your use case, if you have more PaaS services with DNS zones - ie SQL PaaS.

Take a look at Private DNS Resolver - https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview & https://learn.microsoft.com/en-us/azure/dns/private-resolver-hybrid-dns#azure-dns-private-resolver

These DNS zones can be linked to a Virtual Network, allowing you to look it up.

If your on-premises, you can setup DNS conditional forwarders: https://learn.microsoft.com/en-us/azure/architecture/example-scenario/networking/azure-dns-private-resolver#use-a-dns-forwarder-vm

Share via

Azure DNS Zone Resolving Issue

2 answers

Your answer