Update articles/container-apps/networking.md

Co-authored-by: Craig Shoemaker <[email protected]>

Author: gabesmsft

articles/container-apps/networking.md

@@ -191,10 +191,13 @@ If you're using the Azure CLI and the [platformReservedCidr](vnet-custom-interna
 There's no forced tunneling in Container Apps routes.
 
 ## DNS
--	If your VNET uses a custom DNS server instead of the default Azure-provided DNS server, we recommend that you configure your DNS server to forward unresolved DNS queries to 168.63.129.16, which is used for the [Azure recursive resolvers](https://docs.microsoft.com/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances#name-resolution-that-uses-your-own-dns-server). If you do not use the Azure recursive resolvers, the Container App Environment will not function.
--	If you plan to use VNET-scope [Ingress](https://docs.microsoft.com/azure/container-apps/ingress#configuration) for Container Apps in an internal Container App Environment, you must do one of the following:
-  - If you do not plan to use custom domains, create a private DNS zone that resolves the Container App Environment’s default domain to the static IP address of the Container App Environment. You can use [Azure Private DNS](https://docs.microsoft.com/azure/dns/private-dns-overview) or your own DNS server.  If you use Azure Private DNS, create a Private DNS Zone named as the Container App Environment’s default domain (*<UNIQUE_IDENTIFIER>*.*<REGION_NAME>*.azurecontainerapps.io), with an A record that points to the static IP address of the Container App Environment.
-  - If you plan to use custom domains, use a publicly resolvable domain to [add a custom domain and certificate](https://docs.microsoft.com/azure/container-apps/custom-domains-certificates#add-a-custom-domain-and-certificate) to the Container App. Additionally, create a private DNS zone that resolves the apex domain to the static IP address of the Container App Environment. You can use [Azure Private DNS](https://docs.microsoft.com/azure/dns/private-dns-overview) or your own DNS server. If you use Azure Private DNS, create a Private DNS Zone named as the apex domain, with an A record that points to the static IP address of the Container App Environment.
+-	**Custom DNS**: If your VNET uses a custom DNS server instead of the default Azure-provided DNS server, configure your DNS server to forward unresolved DNS queries to `168.63.129.16`. [Azure recursive resolvers](../virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances.md#name-resolution-that-uses-your-own-dns-server) uses this IP address to resolve requests. If you do not use the Azure recursive resolvers, the Container Apps environment will not function.
+
+-	**VNET-scope ingress**: If you plan to use VNET-scope [ingress](./ingress.md#configuration) in an internal Container Apps environment, configure your domains in one of the following ways:
+
+    1. **Non-custom domains**: If you do not plan to use custom domains, create a private DNS zone that resolves the Container Apps environment's default domain to the static IP address of the Container Apps environment. You can use [Azure Private DNS](../dns/private-dns-overview.md) or your own DNS server.  If you use Azure Private DNS, create a Private DNS Zone named as the Container App Environment’s default domain (`<UNIQUE_IDENTIFIER>.<REGION_NAME>.azurecontainerapps.io`), with an `A` record that points to the static IP address of the Container Apps environment.
+
+    1. **Custom domains**: If you plan to use custom domains, use a publicly resolvable domain to [add a custom domain and certificate](./custom-domains-certificates.md#add-a-custom-domain-and-certificate) to the container app. Additionally, create a private DNS zone that resolves the apex domain to the static IP address of the Container Apps environment. You can use [Azure Private DNS](../dns/private-dns-overview.md) or your own DNS server. If you use Azure Private DNS, create a Private DNS Zone named as the apex domain, with an `A` record that points to the static IP address of the Container Apps environment.
 
 ## Managed resources