Question

Your company runs an internal application in a Google Cloud VPC. Applications on Compute Engine instances must resolve hostnames in the internal domain 'corp.example.internal', which is managed by DNS servers running in your on-premises data center reachable over an existing HA VPN connection (private IP 10.20.0.53). Google Cloud must send queries for this domain to the on-premises resolver, but all other queries should continue to use Google's default resolution. What should you configure in Cloud DNS?

Accepted Answer

Create a Cloud DNS forwarding zone for 'corp.example.internal' with forwarding targets set to the on-premises resolver IP 10.20.0.53.

Answer

Create a private managed zone for 'corp.example.internal' with DNSSEC enabled and add A records manually for each on-premises host.

Answer

Create a DNS peering zone for 'corp.example.internal' that peers with the on-premises DNS servers over the HA VPN.

Answer

Enable inbound DNS forwarding by creating an inbound server policy so on-premises servers can query Cloud DNS for 'corp.example.internal'.