Question

A retailer runs workloads in a Google Cloud VPC and maintains a large on-premises data center connected via HA VPN. Applications in the VPC must resolve private hostnames hosted by the on-premises Microsoft AD DNS servers, and on-premises clients must resolve records for private Cloud DNS zones used by the cloud workloads. The team wants a fully managed solution without deploying and maintaining DNS proxy VMs in Google Cloud. Which Cloud DNS configuration should they implement?

Accepted Answer

Create a Cloud DNS private zone with forwarding to the on-premises servers, and configure a Cloud DNS server policy that enables inbound DNS forwarding so on-premises clients query the assigned inbound forwarder IPs.

Answer

Deploy DNS forwarder VM instances in the VPC that relay queries in both directions and point both environments at these instances.

Answer

Use Cloud DNS peering between the VPC and the on-premises DNS servers so records are exchanged bidirectionally.

Answer

Configure a single Cloud DNS public managed zone and enable DNSSEC so both environments resolve each other's records over the internet.