You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/dns/delegate-subdomain.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: dns
5
5
author: greg-lindsay
6
6
ms.service: dns
7
7
ms.topic: how-to
8
-
ms.date: 11/28/2023
8
+
ms.date: 06/07/2024
9
9
ms.author: greglin
10
10
---
11
11
@@ -24,7 +24,7 @@ To delegate an Azure DNS subdomain, the parent public domain must first be deleg
24
24
25
25
## Delegate a subdomain
26
26
27
-
The **engineering.adatum.com** subdomain can already exist. If it doesn't exist, it is created.
27
+
The **engineering.adatum.com** subdomain can already exist. If it doesn't exist, it is created. The parent domain (in this example: **adatum.com**) must already exist as an Azure-hosted domain.
28
28
29
29
To delegate the **engineering** subdomain under **adatum.com**:
30
30
@@ -39,7 +39,7 @@ To delegate the **engineering** subdomain under **adatum.com**:
39
39
40
40
[](./media/delegate-subdomain/child-zone-contents.png#lightbox)
41
41
42
-
6. Select the parent **adatum.com** zone again and notice that an **NS** record has been added with the name **engineering** and contents the same as NS records in the child zone. You might need to refresh the page. These are the Azure DNS nameservers that are authoritative for the subdomain (child zone).
42
+
6. Select the parent **adatum.com** zone again and then select **Recordsets**. Notice that an **NS** record has been added with the name **engineering** and contents the same as NS records in the child zone. These are the Azure DNS nameservers that are authoritative for the subdomain (child zone).
43
43
44
44
[](./media/delegate-subdomain/parent-zone-contents.png#lightbox)
Copy file name to clipboardExpand all lines: articles/dns/dns-delegate-domain-azure-dns.md
+21-31Lines changed: 21 additions & 31 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,15 +5,15 @@ services: dns
5
5
author: greg-lindsay
6
6
ms.service: dns
7
7
ms.topic: tutorial
8
-
ms.date: 05/29/2024
8
+
ms.date: 06/07/2024
9
9
ms.author: greglin
10
10
ms.custom: template-tutorial
11
11
#Customer intent: As an experienced network administrator, I want to configure Azure DNS, so I can host DNS zones.
12
12
---
13
13
14
14
# Tutorial: Host your domain in Azure DNS
15
15
16
-
You can use Azure DNS to host your DNS domain and manage your DNS records. By hosting your domains in Azure, you can manage your DNS records by using the same credentials, APIs, tools, and billing as your other Azure services.
16
+
You can use Azure DNS to host your DNS domain and manage your DNS records. By hosting your domains in Azure, you can manage your DNS records using the same credentials, APIs, tools, and billing as your other Azure services.
17
17
18
18
Suppose you buy the domain `contoso.com` from a domain name registrar and then create a zone with the name `contoso.com` in Azure DNS. Since you're the owner of the domain, your registrar offers you the option to configure the name server (NS) records for your domain. The registrar stores the NS records in the `.com` parent zone. Internet users around the world are then directed to your domain in your Azure DNS zone when they try to resolve DNS records in `contoso.com`.
19
19
@@ -46,7 +46,7 @@ If you don’t have an Azure subscription, create a [free account](https://azure
46
46
* A domain name that you can host in Azure DNS. You must have full control of this domain. Full control includes the ability to set the name server (NS) records for the domain.
47
47
48
48
> [!NOTE]
49
-
> In this tutorial, `contoso.com` is used as an example domain name. Replace `contoso.com` with your own domain name.
49
+
> In this tutorial, `contoso.xyz` is used as an example domain name. Replace `contoso.xyz` with your own domain name.
50
50
51
51
## Sign in to Azure
52
52
@@ -55,50 +55,45 @@ Sign in to the [Azure portal](https://portal.azure.com).
55
55
## Create a DNS zone
56
56
57
57
1. In the Azure portal, enter *dns zone* in the search box at the top of the portal, and then select **DNS zones** from the search results.
58
-
59
-
1. In **DNS zones**, select **+ Create**.
60
-
61
-
1. In the **Create DNS zone** page, enter or select the following information in the **Basics** tab:
58
+
2. In **DNS zones**, select **+ Create**.
59
+
3. In the **Create DNS zone** page, enter or select the following information in the **Basics** tab:
62
60
63
61
| Setting | Value |
64
62
| ------- | ----- |
65
63
|**Project details**||
66
64
| Subscription | Select your Azure subscription.|
67
-
| Resource group |Select **Create new**</br> In **Name**, enter **myResourceGroup** </br> Select **OK**. |
65
+
| Resource group |Choose an existing resource group or select **Create new**and enter a name for the new resource group. For example: **myResourceGroup**. |
68
66
|**Instance details**||
69
67
| This zone is a child of an existing zone already hosted in Azure DNS | Clear this checkbox since the DNS zone isn't a [child zone](./tutorial-public-dns-zones-child.md). |
70
-
| Name | Enter your DNS zone name. |
71
-
| Resource group location |Select the resource group location. </br> The resource group location doesn't affect your DNS zone service, which is global and not bound to a location. |
68
+
| Name | Enter your DNS zone name. For example: **contoso.xyz**.|
69
+
| Resource group location |If you created a new resource group, choose a location. </br> The resource group location doesn't affect your DNS zone service, which is global and not bound to a location. |
72
70
73
-
:::image type="content" source="./media/dns-delegate-domain-azure-dns/create-parent-dns-zone.png" alt-text="Screenshot of Create D N S zone page showing the settings used in this tutorial to create a parent D N S zone.":::
71
+
:::image type="content" source="./media/dns-delegate-domain-azure-dns/create-parent-dns-zone.png" alt-text="Screenshot of the Create DNS zone page showing the settings used in this tutorial to create a parent DNS zone.":::
74
72
75
73
1. Select **Review + create**.
76
74
1. Select **Create**.
77
75
78
76
> [!NOTE]
79
-
> If the new zone that you are creating is a child zone (e.g. parent zone = `contoso.com` child zone = `child.contoso.com`), then please refer to[Create a child DNS zone tutorial](./tutorial-public-dns-zones-child.md).
77
+
> If the new zone that you are creating is a child zone see[Create a child DNS zone tutorial](./tutorial-public-dns-zones-child.md).
80
78
81
79
## Retrieve name servers
82
80
83
-
Before you can delegate your DNS zone to Azure DNS, you need to know the name servers for your zone. Azure DNS gives name servers from a pool each time a zone is created.
84
-
85
-
1. In the Azure portal, enter *dns zone* in the search box at the top of the portal, and then select **DNS zones** from the search results.
81
+
Before you can delegate your DNS zone to Azure DNS, you need to know the name servers for your zone. Azure DNS assigns name servers from a pool each time a zone is created.
86
82
87
-
1. In **DNS zones**, select **contoso.com**.
83
+
1. In the Azure portal, enter **DNS zones** in the search box at the top of the portal and then select **DNS zones** from the search results.
84
+
2. In **DNS zones**, select the name of your zone. For example: **contoso.xyz**.
85
+
3. On the **Overview** page, retrieve the name servers. In this example, the DNS zone **contoso.xyz** has been assigned name servers `ns1-37.azure-dns.com`, `ns2-37.azure-dns.net`, `ns3-37.azure-dns.org`, and `ns4-37.azure-dns.info`:
88
86
89
-
1. In the **Overview** page, retrieve the name servers. In this example, the DNS zone **contoso.com** has been assigned name servers `ns1-01.azure-dns.com`, `ns2-01.azure-dns.net`, `ns3-01.azure-dns.org`, and `ns4-01.azure-dns.info`:
90
-
91
-
:::image type="content" source="./media/dns-delegate-domain-azure-dns/dns-name-servers-inline.png" alt-text="Screenshot of D N S zone showing assigned Azure name servers" lightbox="./media/dns-delegate-domain-azure-dns/dns-name-servers-expanded.png":::
87
+
[](./media/dns-delegate-domain-azure-dns/contoso.xyz.overview.png)
92
88
93
89
Azure DNS automatically creates authoritative NS records in your zone for the assigned name servers.
94
90
95
91
## Delegate the domain
96
92
97
-
Once the DNS zone gets created and you have the name servers, you'll need to update the parent domain with the Azure DNS name servers. Each registrar has its own DNS management tools to change the name server records for a domain.
98
-
99
-
1. In the registrar's DNS management page, edit the NS records and replace the NS records with the Azure DNS name servers.
93
+
After the DNS zone is created, you must update the parent domain with the Azure DNS name servers by registering the domain with a domain registrar. Each registrar has its own DNS management tools to assign the name server records for a domain. In the example used here, the parent domain is **xyz**.
100
94
101
-
1. When you delegate a domain to Azure DNS, you must use the name servers that Azure DNS provides. Use all four name servers, regardless of the name of your domain. Domain delegation doesn't require a name server to use the same top-level domain as your domain.
95
+
1. In the registrar's DNS management page, create or edit the NS records to assign the Azure DNS name servers.
96
+
2. When you delegate a domain to Azure DNS, you must use the name servers that Azure DNS provides. Use all four name servers, regardless of the name of your domain. Domain delegation doesn't require a name server to use the same top-level domain as your domain.
102
97
103
98
> [!IMPORTANT]
104
99
> When you copy each name server address, make sure you copy the trailing period at the end of the address. The trailing period indicates the end of a fully qualified domain name. Some registrars append the period if the NS name doesn't have it at the end. To be compliant with the DNS RFC, include the trailing period.
@@ -114,25 +109,20 @@ You don't have to specify the Azure DNS name servers. If the delegation is set u
114
109
1. From a command prompt, enter a nslookup command similar to the following example:
115
110
116
111
```
117
-
nslookup -type=SOA contoso.com
112
+
nslookup -type=SOA contoso.xyz
118
113
```
119
114
120
115
1. Verify that your response looks similar to the following nslookup output:
121
116
122
117
```
123
-
Server: ns1-04.azure-dns.com
124
-
Address: 40.90.4.1
125
-
126
-
contoso.com
127
-
primary name server = ns1-04.azure-dns.com
118
+
contoso.xyz
119
+
primary name server = ns1-37.azure-dns.com
128
120
responsible mail addr = azuredns-hostmaster.microsoft.com
Copy file name to clipboardExpand all lines: articles/dns/dns-domain-delegation.md
+19-17Lines changed: 19 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,24 +4,26 @@ description: Understand how to change domain delegation and use Azure DNS name s
4
4
services: dns
5
5
author: greg-lindsay
6
6
ms.service: dns
7
-
ms.date: 11/30/2023
7
+
ms.date: 06/07/2024
8
8
ms.author: greglin
9
9
ms.topic: conceptual
10
10
---
11
11
12
12
# Delegation of DNS zones with Azure DNS
13
13
14
-
Azure DNS allows you to host a DNS zone and manage the DNS records for a domain in Azure. In order for DNS queries for a domain to reach Azure DNS, the domain has to be delegated to Azure DNS from the parent domain. Keep in mind Azure DNS isn't the domain registrar. This article explains how domain delegation works and how to delegate domains to Azure DNS.
14
+
Azure DNS allows you to host a DNS domain and manage the DNS zone records. To host your domain in Azure, the zone must be created in Azure and delegated to Azure's authoritative DNS servers with a domain registrar. Azure DNS isn't the domain registrar. This article explains how domain delegation works and how to delegate domains to Azure DNS.
15
+
16
+
Also see: [Tutorial: Host your domain in Azure DNS](dns-delegate-domain-azure-dns.md).
15
17
16
18
## How DNS delegation works
17
19
18
20
### Domains and zones
19
21
20
-
The Domain Name System is a hierarchy of domains. The hierarchy starts from the `root` domain, whose name is simply "`.`". Below this come top-level domains, such as `com`, `net`, `org`, `uk` or `jp`. Below these top-level domains are second-level domains, such as `org.uk` or `co.jp`. And so on. The domains in the DNS hierarchy are hosted using separate DNS zones. These zones are globally distributed, hosted by DNS name servers around the world.
22
+
The Domain Name System (DNS) is a hierarchy of domains. The hierarchy starts from the `root` domain, whose name is simply "`.`". Below this are top-level domains, such as `com`, `net`, `org`, `uk` or `jp`. Below these top-level domains are second-level domains, such as `org.uk` or `co.jp`. And so on. The domains in the DNS hierarchy exist as separate DNS zones. These zones are globally distributed and hosted by DNS name servers around the world.
21
23
22
-
**DNS zone** - A domain is a unique name in the Domain Name System, for example`contoso.com`. A DNS zone is used to host the DNS records for a particular domain. For example, the domain `contoso.com`may contain several DNS records such as `mail.contoso.com` (for a mail server) and `www.contoso.com` (for a website).
24
+
**DNS zone** - A public DNS zone has a unique name (for example: **contoso.com**) and consists of a collection of resource records. The DNS zone hosts DNS resource records of varying types. For example, the domain `contoso.com`can contain DNS records such as `mail.contoso.com` (for a mail server) and `www.contoso.com` (for a website).
23
25
24
-
**Domain registrar** - A domain registrar is a company who can provide Internet domain names. They verify if the Internet domain you want to use is available and allow you to purchase it. Once the domain name is registered, you're the legal owner for the domain name. If you already have an Internet domain, you'll use the current domain registrar to delegate to Azure DNS.
26
+
**Domain registrar** - A domain registrar is an organization that can provide Internet (public) domain names. They verify if the Internet domain you want to use is available and provide the ability to purchase it. When you register a domain name, you're the legal owner for that domain. If you already have an Internet domain, you can use your current domain registrar to delegate this domain to Azure DNS.
25
27
26
28
For more information about accredited domain registrars, see [ICANN-Accredited Registrars](https://www.icann.org/registrar-reports/accredited-list.html).
27
29
@@ -32,29 +34,29 @@ There are two types of DNS servers:
32
34
* An *authoritative* DNS server hosts DNS zones. It answers DNS queries for records in those zones only.
33
35
* A *recursive* DNS server doesn't host DNS zones. It answers all DNS queries by calling authoritative DNS servers to gather the data it needs.
34
36
35
-
Azure DNS provides an authoritative DNS service. It doesn't provide a recursive DNS service. Cloud Services and VMs in Azure are automatically configured to use a recursive DNS service that is provided separately as part of Azure's infrastructure. For information on how to change these DNS settings, see [Name Resolution in Azure](../virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances.md#name-resolution-that-uses-your-own-dns-server).
37
+
Azure DNS provides an authoritative DNS service. It doesn't provide a public recursive DNS service. For information about Azure's private DNS recursive service, see [What is Azure DNS Private Resolver](dns-private-resolver-overview.md). By default, cloud services and VMs in Azure are configured to use a recursive DNS service that is provided separately as part of Azure's infrastructure. For information on how to change these DNS settings, see [Name Resolution in Azure](../virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances.md#name-resolution-that-uses-your-own-dns-server).
36
38
37
39
DNS clients in PCs or mobile devices typically call a recursive DNS server to do any DNS queries the client applications need.
38
40
39
-
When a recursive DNS server receives a query for a DNS record such as `www.contoso.com`, it first needs to find the name server hosting the zone for the `contoso.com` domain. To find the name server, it starts at the root name servers, and from there finds the name servers hosting the `com`zone. It then queries the `com` name servers to find the name servers hosting the `contoso.com`zone. Finally, it's able to query these name servers for `www.contoso.com`.
41
+
When a recursive DNS server receives a query for a DNS record such as `www.contoso.com`, it first needs to find the authoritative name server hosting the `contoso.com` domain. To find the name server, it starts at the root name servers, and from there finds the name servers hosting the `com`domain. It then queries the `com` name servers to find the name servers hosting the `contoso.com`domain. Finally, it's able to query these name servers for `www.contoso.com`.
40
42
41
43
This procedure is called resolving the DNS name. Strictly speaking, DNS resolution includes more steps such as following CNAMEs, but that's not important to understanding how DNS delegation works.
42
44
43
-
How does a parent zone point to the name servers for a child zone? It does this using a special type of DNS record called an NS record (NS stands for 'name server'). For example, the root zone contains NS records for `com` and shows the name servers for the `com`zone. In turn, the `com`zone contains NS records for `contoso.com`, which shows the name servers for the `contoso.com`zone. Setting up the NS records for a child zone in a parent zone is called delegating the domain.
45
+
How does a parent zone point to the name servers for a child zone? It does this using a special type of DNS record called an NS record (NS stands for 'name server'). For example, the root zone contains NS records for `com` and shows the name servers for the `com`domain. In turn, the `com`domain contains NS records for `contoso.com` that display name servers for the `contoso.com`domain. Setting up the NS records for a child zone in a parent zone is called delegating the domain.
44
46
45
-
The following image shows an example DNS query. The `contoso.net` and `partners.contoso.net` are AzureDNS zones.
47
+
The following image shows an example DNS query. The `contoso.net` and `partners.contoso.net`zones are public DNS domains that have been delegated to Azure's authoritative DNS servers.

48
50
49
51
1. The client requests `www.partners.contoso.net` from their local DNS server.
50
-
2. The local DNS server doesn't have the record so it makes a request to their root name server.
51
-
3. The root name server doesn't have the record, but knows the address of the `.net` name server, it provides that address to the DNS server
52
+
2. The local DNS server doesn't have the record so it makes a request to the root name server.
53
+
3. The root name server doesn't have the record, but knows the address of the `.net` name server, which it provides to the local DNS server
52
54
4. The local DNS server sends the request to the `.net` name server.
53
-
5. The `.net` name server doesn't have the record but does know the address of the `contoso.net` name server. In this case, it responds with the address of the name server for the DNS zone hosted in Azure DNS.
54
-
6. The local DNS server sends the request to the name server for the `contoso.net`zone hosted in Azure DNS.
55
-
7. The zone `contoso.net` doesn't have the record but knows the name server for `partners.contoso.net` and responds with the address. In this case, it's a DNS zone hosted in Azure DNS.
56
-
8. The local DNS server sends the request to the name server for the `partners.contoso.net`zone.
57
-
9. The `partners.contoso.net` zone has the A record and responds with the IP address.
55
+
5. The `.net` name server doesn't have the record but does know the address of the `contoso.net` name server. In this case, it responds with the address of the name server for the DNS domain hosted in Azure DNS.
56
+
6. The local DNS server sends the request to the name server for the `contoso.net`domain hosted in Azure DNS.
57
+
7. The zone `contoso.net` doesn't have the record but knows the name server for `partners.contoso.net` and responds with the address. In this case, it's a DNS domain hosted in Azure DNS.
58
+
8. The local DNS server sends the request to the name server for the `partners.contoso.net`domain.
59
+
9. The `partners.contoso.net` zone has the A record for `www`and responds with the IP address.
58
60
10. The local DNS server provides the IP address to the client.
59
61
11. The client connects to the website `www.partners.contoso.net`.
0 commit comments