Question

Your company runs several Azure VNets and an on-premises data center connected via ExpressRoute. Azure-hosted VMs must resolve records in a private DNS zone (azure.contoso.com) linked to the hub VNet, and on-premises servers must resolve those same Azure private DNS records. Additionally, Azure VMs must resolve on-premises Active Directory names (corp.contoso.com) hosted on on-premises DNS servers. You want a fully managed solution that avoids deploying and maintaining DNS forwarder VMs. What should you implement?

Accepted Answer

Deploy Azure DNS Private Resolver in the hub VNet with an inbound endpoint for on-premises queries and an outbound endpoint with a DNS forwarding ruleset for corp.contoso.com

Answer

Deploy a pair of Windows Server DNS forwarder VMs in the hub VNet and configure conditional forwarders in both directions

Answer

Configure the VNet's custom DNS server settings to point to the on-premises DNS servers and link the private DNS zone to all VNets

Answer

Enable Azure Firewall DNS proxy in the hub VNet and configure the on-premises DNS servers as forwarders