Private endpoints not working

Question

Hello,

We have a unique setup as shown in the diagram and I am trying to setup private endpoint for SQL MI, keyvault and storage accounts.

The vnet is configured with custom domain controller. This domain controller sits in diff vnet which is not directly peered with our vnet.

all the pvt DNS zones required for each services are placed in our HUB subscriptions with proper vnet link and other configurations.

whenever I try to do DNS resolution, I still get resolved to public IPs and sometimes times out. can someone please help here?

Answer 1

Hi

there is no diagram, but I assume you're using a standard Hub and Spoke network model.

A few things from me:

• Do you have Azure Firewall in your Hub?
• Do you have any UDR's (User Defined Routes) defined in your Route Tables coming from the Spoke?

What you could do is define the Domain Controller-bound ports in the UDR that your SQL sits in, and send them back to your Firewall in the Hub. Then have rules to route that traffic to your Domain Controllers Spoke.

Hope this helps,

Thanks

Michael Durkan

• If the reply was helpful please upvote and/or accept as answer as this helps others in the community with similar questions. Thanks!

Answer 2

@Mohammed Thahif BK

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

• Can you please provide more information on your scenario?
• We do not see a diagram attached to the question
  • Please share the network architecture of the set up

When you say, "whenever I try to do DNS resolution, I still get resolved to public IPs and sometimes times out"

• May I ask from where?
  • From which VNET are you trying to do the DNS query?
    • Or is that from OnPrem?

#1. If this is a VNET in Azure,

• And you have no custom DNS server : The private DNS Zones should be linked to this VNET
• Or if you have a custom DNS server : Refer to this

#2. If this a OnPREM server ,

• Refer to On-premises workloads using a DNS forwarder

Hope this helps.

Cheers,

Kapil