DNS lookup is not giving the right private IP address

SATYA PAVANKUMAR 40 Reputation points Microsoft Employee
2024-01-17T07:06:29.0766667+00:00

From azure cloud, I set up a azure app configuration with a private endpoint and configured the name resolution in the private DNS zone A records. I also created a virtual machine in the same VNET and subnet as the key vault and tried to query the DNS inside VM, but the private IP address not returning right one.  the private DNS zone to link to the same VNET as the app configuration resource. The private endpoint connection has been approved and connected to the app configuration. We are using the same VNET and subnet for both resources. There is no on premises networks enabled or configured. The VNET uses default Azure provided DNS Server. My VM is Linux (ubuntu 22.04) and has a size of Standard D4s v5 (4 vcpus, 16 GiB memory).

From what I observed is VM is not using default DNS servers from Azure. I am not sure to how to make it?
User's image

Azure DNS
Azure DNS
An Azure service that enables hosting Domain Name System (DNS) domains in Azure.
603 questions
Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,256 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,197 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
470 questions
{count} votes

Accepted answer
  1. Deepanshu katara 5,375 Reputation points
    2024-01-17T07:36:09.8+00:00

    Hi , When you create a private endpoint, the DNS CNAME resource record for the configuration store is updated to an alias in a subdomain with the prefix private link. Azure also creates a private DNS zone corresponding to the private link subdomain, with the DNS A resource records for the private endpoints. Enabling geo-replication creates separate DNS records for each replica with unique IP addresses in the private DNS zone. When you resolve the endpoint URL from within the VNet hosting the private endpoint, it resolves to the private endpoint of the store. When resolved from outside the VNet, the endpoint URL resolves to the public endpoint. When you create a private endpoint, the public endpoint is disabled. If you are using a custom DNS server on your network, you need to configure it to delegate your privatelink subdomain to the private DNS zone for the VNet. Alternatively, you can configure the A records for your store's private link URLs, which are either [Your-store-name].privatelink.azconfig.io or [Your-store-name]-[replica-name].privatelink.azconfig.io . Please check accordingly and let us know , Thanks


0 additional answers

Sort by: Most helpful