Skip to content

Commit 9b12d92

Browse files
authored
Update private-endpoint-dns.md
Updated Caution area of Doc. Many Support Cases find previous summary to be confusing. Made statement clearer and added new feature for Fallback to Internet with link to documentation.
1 parent f777711 commit 9b12d92

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

articles/private-link/private-endpoint-dns.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ You can use the following options to configure your DNS settings for private end
2424

2525
- **Use the host file (only recommended for testing)**. You can use the host file on a virtual machine to override the DNS.
2626

27-
- **Use a private DNS zone**. You can use [private DNS zones](../dns/private-dns-privatednszone.md) to override the DNS resolution for a private endpoint. A private DNS zone can be linked to your virtual network to resolve specific domains.
27+
- **Use a private DNS zone**. You can use [Private DNS Zones](../dns/private-dns-privatednszone.md) to override the DNS resolution for a private endpoint. A private DNS zone can be linked to your virtual network to resolve specific domains.
2828

2929
- **Use Azure Private Resolver (optional)**. You can use Azure Private Resolver to override the DNS resolution for a private link resource. For more information about Azure Private Resolver, see [What is Azure Private Resolver?](../dns/dns-private-resolver-overview.md).
3030

@@ -43,7 +43,10 @@ Connection URLs for your existing applications don't change. Client DNS requests
4343
> Azure File Shares must be remounted if connected to the public endpoint.
4444
4545
> [!CAUTION]
46-
> * Private networks already using the private DNS zone for a given type, can only connect to public resources if they don't have any private endpoint connections, otherwise a corresponding DNS configuration is required on the private DNS zone in order to complete the DNS resolution sequence. The corresponding DNS configuration is a manually entered A-record that points to the public IP address of the resource. This procedure isn't recommended as the IP address of the A record won't be automatically updated if the corresponding public IP address changes.
46+
> * Private networks using a Private DNS Zone for any given resource type (Ex. privatelink.blob.core.windows.net/ Storage Acocunt), can only resolve DNS Queries to public resources/ Public IPs if those public resources don't have any existing Private Endpoint Connections. If this applies, an additional DNS configuration is required on the Private DNS Zone to complete the DNS resolution sequence. Otherwise the Private DNS Zone will respond to the DNS query with a NXDOMAIN as no matching DNS record would be found in the Private DNS Zone.
47+
>
48+
> > * [Fallback to Internet](../dns/private-dns-fallback.md) for Private DNS Zone Virtual Netowrk Links can be implemented for proper DNS Resolution for the Public IP of the public resource. This allows DNS queries that reach Private DNS Zones to be forwarded to Azure DNS for public resolution.
49+
> > * Alternatively, a manually entered A-record in the Private DNS Zone that contians the Public IP of the public resource would allow for proper DNS resolution. This procedure isn't recommended as the Public IP of the A record in the Private DNS Zone won't be automatically updated if the corresponding public IP address changes for the public resource.
4750
>
4851
> * Private endpoint private DNS zone configurations will only automatically generate if you use the recommended naming scheme in the following tables.
4952

0 commit comments

Comments
 (0)