Skip to content

Commit 1246f0d

Browse files
Merge pull request #298581 from greg-lindsay/dns-upd
support for bring your own IPs
2 parents 87d8d54 + 9a50b8d commit 1246f0d

File tree

2 files changed

+104
-12
lines changed

2 files changed

+104
-12
lines changed

articles/dns/dns-reverse-dns-for-azure-services.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: dns
55
author: greg-lindsay
66
ms.service: azure-dns
77
ms.topic: how-to
8-
ms.date: 09/11/2024
8+
ms.date: 04/21/2025
99
ms.author: greglin
1010
ms.custom: devx-track-azurepowershell, devx-track-azurecli
1111
---
@@ -14,7 +14,7 @@ ms.custom: devx-track-azurepowershell, devx-track-azurecli
1414

1515
[!INCLUDE [updated-for-az](~/reusable-content/ce-skilling/azure/includes/updated-for-az.md)]
1616

17-
This article explains how to configure reverse DNS lookups for services hosted in Azure.
17+
This article explains how to configure reverse DNS lookups for services hosted in Azure. To host and configure reverse DNS for public IP address ranges assigned to you by your ISP, see [Host reverse DNS lookup zones in Azure DNS](dns-reverse-dns-hosting.md).
1818

1919
Services in Azure use IP addresses assigned by Azure and owned by Microsoft. These reverse DNS records (PTR records) must be created in the corresponding Microsoft-owned reverse DNS lookup zones.
2020

@@ -241,7 +241,7 @@ No. Azure supports a single reverse DNS record for each Azure Cloud Service or P
241241

242242
### Can I configure reverse DNS for IPv6 PublicIpAddress resources?
243243

244-
No. Azure DNS does not currently support reverse DNS (PTR records) for public IPv6 addresses.
244+
No. Azure DNS does not currently support reverse DNS (PTR records) for Azure-owned public IPv6 addresses. To configure reverse DNS for IPv6 addresses issued to you by your ISP, see [Host reverse DNS lookup zones in Azure DNS](dns-reverse-dns-hosting.md).
245245

246246
### Can I send emails to external domains from my Azure Compute services?
247247

articles/dns/dns-reverse-dns-hosting.md

Lines changed: 101 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to use Azure DNS to host the reverse DNS lookup zones for
44
author: greg-lindsay
55
ms.service: azure-dns
66
ms.topic: how-to
7-
ms.date: 02/21/2025
7+
ms.date: 04/21/2025
88
ms.author: greglin
99
ms.custom: devx-track-azurepowershell, devx-track-azurecli
1010
ms.devlang: azurecli
@@ -14,9 +14,7 @@ ms.devlang: azurecli
1414

1515
[!INCLUDE [updated-for-az](~/reusable-content/ce-skilling/azure/includes/updated-for-az.md)]
1616

17-
This article explains how to host reverse DNS lookup zones for your assigned IP ranges with Azure DNS. The IP ranges represented by the reverse lookup zones must be assigned to your organization, typically by your ISP.
18-
19-
To configure reverse DNS for an Azure-owned IP address assigned to your Azure service, see [Configure reverse DNS for services hosted in Azure](dns-reverse-dns-for-azure-services.md).
17+
This article explains how to host reverse DNS lookup zones for your assigned IP ranges with Azure DNS. The IP ranges represented by the reverse lookup zones must be assigned to your organization, typically by your ISP. The scenario described in this article is not for IP addresses assigned by Microsoft. To configure reverse DNS for Microsoft-assigned IP address ranges, see [Configure reverse DNS for services hosted in Azure](dns-reverse-dns-for-azure-services.md).
2018

2119
Before reading this article, you should familiarize yourself with the [overview of reverse DNS](dns-reverse-dns-overview.md) and it's supported in Azure.
2220

@@ -33,7 +31,7 @@ In this article, you learn how to create your first reverse lookup DNS zone and
3331
| --- | --- |
3432
| **Subscription** | Select your subscription.|
3533
| **Resource group** | Select or create a new resource group. To learn more about resource groups, read the [Resource Manager](../azure-resource-manager/management/overview.md?toc=%2fazure%2fdns%2ftoc.json#resource-groups) overview article.|
36-
| **Name** | Enter a name for the DNS zone. Use the instructions for [IPv4](#ipv4) to name your zone. |
34+
| **Name** | Enter a name for the DNS zone. The name of the zone is specified differently for IPv4 and IPv6 prefixes. Use the instructions for [IPv4](#ipv4) or [IPv6](#ipv6) to name your zone. |
3735
| **Location** | Select the location for the resource group. The location is already be selected if you're using a previously created resource group. |
3836

3937
5. Select **Review + create**, and then select **Create** once validation has passed.
@@ -75,7 +73,39 @@ az network dns zone create -g mydnsresourcegroup -n 2.0.192.in-addr.arpa
7573

7674
### IPv6
7775

78-
Azure Public DNS doesn't currently support IPv6 reverse DNS zones or records.
76+
The name of an IPv6 reverse lookup zone should be in the following form:
77+
`<IPv6 network prefix in reverse order>.ip6.arpa`. For examples, see [Overview of reverse DNS](dns-reverse-dns-overview.md#ipv6) for IPv6.
78+
79+
80+
The following example shows how to create an IPv6 reverse DNS lookup zone named `0.0.0.0.d.c.b.a.8.b.d.0.1.0.0.2.ip6.arpa` in Azure DNS via the Azure portal:
81+
82+
:::image type="content" source="./media/dns-reverse-dns-hosting/ipv6-arpa-zone.png" alt-text="Screenshot of create IPv6 arpa DNS zone.":::
83+
84+
The following examples show how to complete this task using Azure PowerShell and Azure CLI.
85+
86+
#### PowerShell
87+
88+
```powershell
89+
New-AzDnsZone -Name 0.0.0.0.d.c.b.a.8.b.d.0.1.0.0.2.ip6.arpa -ResourceGroupName mydnsresourcegroup
90+
```
91+
92+
#### Azure classic CLI
93+
94+
```azurecli
95+
azure network dns zone create mydnsresourcegroup 0.0.0.0.d.c.b.a.8.b.d.0.1.0.0.2.ip6.arpa
96+
```
97+
98+
#### Azure CLI
99+
100+
```azurecli
101+
az network dns zone create -g mydnsresourcegroup -n 0.0.0.0.d.c.b.a.8.b.d.0.1.0.0.2.ip6.arpa
102+
```
103+
104+
## Delegate a reverse DNS lookup zone
105+
106+
Once the reverse DNS lookup zone gets created, you then need to make sure the zone gets delegated from the parent zone. DNS delegation enables the DNS name resolution process to find the name servers that host your reverse DNS lookup zone. Those name servers can then answer DNS reverse queries for the IP addresses in your address range.
107+
108+
For forward lookup zones, the process of delegating a DNS zone is described in [Delegate your domain to Azure DNS](dns-delegate-domain-azure-dns.md). Delegation for reverse lookup zones works the same way. The only difference is that you need to configure the name servers with the ISP. The ISP manages your IP range, that's why they need to update the name servers instead of domain name registrar.
79109

80110
## Create a DNS PTR record
81111

@@ -120,7 +150,47 @@ az network dns record-set ptr add-record -g mydnsresourcegroup -z 2.0.192.in-add
120150

121151
### IPv6
122152

123-
Azure Public DNS doesn't currently support IPv6 reverse DNS zones or records.
153+
The following example explains the process of creating new PTR record for IPv6. To learn more about record types or how to modify existing records, see [Manage DNS records and record sets](dns-operations-recordsets-portal.md).
154+
155+
1. At the top of the reverse DNS zone **Overview** page, select **Record sets** and then select **+Add**.
156+
157+
![A screenshot of how to add an IPv6 reverse DNS record to a DNS zone.](./media/dns-reverse-dns-hosting/create-record-set-ipv6.png)
158+
159+
1. The name of the record set for a PTR record is the rest of the IPv6 address in reverse order. It must not include any zero compression.
160+
161+
In this example, the first 64 bits of the IPv6 gets populated as part of the zone name (0.0.0.0.c.d.b.a.8.b.d.0.1.0.0.2.ip6.arpa). That's why only the last 64 bits are supplied in the **Name** box. The last 64 bits of the IP address gets entered in reverse order, with a period as the delimiter between each hexadecimal number. Name your record set **e.5.0.4.9.f.a.1.c.b.0.1.4.2.5.f** if you have a resource whose IP address is 2001:0db8:abdc:0000:f524:10bc:1af9:405e.
162+
163+
:::image type="content" source="./media/dns-reverse-dns-hosting/create-ipv6-ptr.png" alt-text="Screenshot of create IPv6 pointer record.":::
164+
165+
1. For *Type*, select **PTR**.
166+
167+
1. For *DOMAIN NAME*, enter the FQDN of the resource that uses the IP.
168+
169+
1. Select **OK** to create the DNS record.
170+
171+
The following examples show how to complete this task by using PowerShell or Azure CLI.
172+
173+
#### PowerShell
174+
175+
```azurepowershell-interactive
176+
New-AzDnsRecordSet -Name "e.5.0.4.9.f.a.1.c.b.0.1.4.2.5.f" -RecordType PTR -ZoneName 0.0.0.0.c.d.b.a.8.b.d.0.1.0.0.2.ip6.arpa -ResourceGroupName mydnsresourcegroup -Ttl 3600 -DnsRecords (New-AzDnsRecordConfig -Ptrdname "dc2.contoso.com")
177+
```
178+
179+
#### Azure classic CLI
180+
181+
```azurecli
182+
azure network dns record-set add-record mydnsresourcegroup 0.0.0.0.c.d.b.a.8.b.d.0.1.0.0.2.ip6.arpa e.5.0.4.9.f.a.1.c.b.0.1.4.2.5.f PTR --ptrdname dc2.contoso.com
183+
```
184+
185+
#### Azure CLI
186+
187+
```azurecli-interactive
188+
az network dns record-set ptr add-record -g mydnsresourcegroup -z 0.0.0.0.c.d.b.a.8.b.d.0.1.0.0.2.ip6.arpa -n e.5.0.4.9.f.a.1.c.b.0.1.4.2.5.f --ptrdname dc2.contoso.com
189+
```
190+
191+
## View records
192+
193+
To view the records that you created, browse to your DNS zone in the Azure portal. In the lower part of the **DNS zone** pane, you can see the records for the DNS zone. You should see the default NS and SOA records, plus any new records that you've created. The NS and SOA records are created in every zone.
124194

125195
### IPv4
126196

@@ -150,7 +220,29 @@ az network dns record-set list -g mydnsresourcegroup -z 2.0.192.in-addr.arpa
150220

151221
### IPv6
152222

153-
Azure Public DNS doesn't currently support IPv6 reverse DNS zones or records.
223+
The **DNS zone** page shows the IPv6 PTR record:
224+
225+
:::image type="content" source="./media/dns-reverse-dns-hosting/view-ipv6-ptr-record.png" alt-text="Screenshot of IPv6 pointer record on overview page." lightbox="./media/dns-reverse-dns-hosting/view-ipv6-ptr-record.png":::
226+
227+
The following examples show how to view the records by using PowerShell or Azure CLI.
228+
229+
#### PowerShell
230+
231+
```powershell
232+
Get-AzDnsRecordSet -ZoneName 0.0.0.0.c.d.b.a.8.b.d.0.1.0.0.2.ip6.arpa -ResourceGroupName mydnsresourcegroup
233+
```
234+
235+
#### Azure classic CLI
236+
237+
```azurecli
238+
azure network dns record-set list mydnsresourcegroup 0.0.0.0.c.d.b.a.8.b.d.0.1.0.0.2.ip6.arpa
239+
```
240+
241+
#### Azure CLI
242+
243+
```azurecli
244+
az network dns record-set list -g mydnsresourcegroup -z 0.0.0.0.c.d.b.a.8.b.d.0.1.0.0.2.ip6.arpa
245+
```
154246

155247
## FAQ
156248

@@ -166,7 +258,7 @@ Hosting the reverse DNS lookup zone for your ISP-assigned IP block in Azure DNS
166258

167259
### Can I host reverse DNS lookup zones for both IPv4 and IPv6 addresses in Azure DNS?
168260

169-
Only IPv4 reverse zones are supported. This article explains how to create IPv4 reverse DNS lookup zones in Azure DNS. IPv6 reverse lookup zones aren't currently supported.
261+
Yes. This article explains how to create both IPv4 and IPv6 reverse DNS lookup zones in Azure DNS.
170262

171263
### Can I import an existing reverse DNS lookup zone?
172264

0 commit comments

Comments
 (0)