Skip to content

Commit f95b0e1

Browse files
committed
add more explanations
1 parent 5fdb8ea commit f95b0e1

File tree

1 file changed

+23
-18
lines changed

1 file changed

+23
-18
lines changed

articles/dns/dns-reverse-dns-for-azure-services.md

Lines changed: 23 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -25,47 +25,49 @@ This scenario differs from the ability to [host the reverse DNS lookup zones](dn
2525

2626
Before reading this article, you should familiarize yourself with [reverse DNS in Azure DNS](dns-reverse-dns-overview.md).
2727

28-
In Azure DNS, compute resources such as virtual machines, virtual machine scale sets, and Service Fabric clusters have Public IP addresses. Reverse DNS lookups are configured using the 'ReverseFqdn' property of the Public IP address.
28+
In Azure DNS, compute resources such as virtual machines, virtual machine scale sets, and Service Fabric clusters have public IP addresses. Reverse DNS lookups are configured using the 'ReverseFqdn' property of the public IP address.
2929

3030
Reverse DNS is currently not supported for the Azure App Service and Application Gateway.
3131

3232
## Validation of reverse DNS records
3333

34-
A third party shouldn't have access to create reverse DNS records for Azure service mapping to your DNS domains. That's why Azure only allows you to create a reverse DNS record if the domain name is the same or resolves to a Public IP address in the same subscription. This restriction also applies to Cloud Service.
34+
A third party shouldn't have access to create reverse DNS records for Azure service mapping to your DNS domains. That's why Azure only allows you to create a reverse DNS record if a forward DNS lookup resolves to the same public IP address, or to names that are defined in your subscription. See the following example. This restriction also applies to Cloud Service.
3535

36-
This validation is only done when the reverse DNS record is set or modified. Periodic revalidation isn't done.
36+
Validation is only done when the reverse DNS record is set or modified. Periodic revalidation isn't done.
3737

38-
For example, suppose the Public IP address resource has the DNS name `contosoapp1.northus.cloudapp.azure.com` and IP address `23.96.52.53`. The reverse FQDN for the Public IP address can be specified as:
38+
For example, suppose the public IP address resource has the DNS name `contosoapp1.northus.cloudapp.azure.com` and IP address `23.96.52.53`. The reverse FQDN for the public IP address can be specified as:
3939

40-
* The DNS name for the Public IP address: `contosoapp1.northus.cloudapp.azure.com`.
40+
* The DNS name for the public IP address: `contosoapp1.northus.cloudapp.azure.com`.
4141
* The DNS name for a different PublicIpAddress in the same subscription, such as: `contosoapp2.westus.cloudapp.azure.com`.
42-
* A vanity DNS name, such as: `app1.contoso.com`. As long as the name is *first* configured as a CNAME pointing to `contosoapp1.northus.cloudapp.azure.com`. The name can also be pointed to a different Public IP address in the same subscription.
42+
* A vanity DNS name, such as: `app1.contoso.com`. As long as the name is *first* configured as a CNAME pointing to `contosoapp1.northus.cloudapp.azure.com`. The name can also be pointed to a different public IP address in the same subscription.
4343
* A vanity DNS name, such as: `app1.contoso.com`. As long as this name is *first* configured as an A record pointing to the IP address 23.96.52.53. The name can also be pointed to another IP address in the same subscription.
4444

4545
The same constraints apply to reverse DNS for Cloud Services.
4646

47-
## Reverse DNS for Public IP address resources
47+
## Reverse DNS for public IP address resources
4848

49-
This section provides detailed instructions for how to configure reverse DNS for Public IP address resources in the Resource Manager deployment model. You can use either Azure PowerShell, Azure classic CLI, or Azure CLI to accomplish this task. Configuring reverse DNS for a Public IP address resource is currently not supported in the Azure portal.
49+
This section provides detailed instructions for how to configure reverse DNS for public IP address resources in the Resource Manager deployment model. You can use either Azure PowerShell, Azure classic CLI, or Azure CLI to accomplish this task. Configuring reverse DNS for a public IP address resource is currently not supported in the Azure portal.
5050

51-
Azure currently supports reverse DNS only for Public IPv4 address resources.
52-
53-
### Add reverse DNS to an existing public IP address
51+
Azure currently supports reverse DNS only for public IPv4 address resources.
5452

5553
> [!IMPORTANT]
5654
> New or updated PTR records must pass [validation](#validation-of-reverse-dns-records). If the PTR for a public IP address doesn't currently exist, you must specify the hostname using **DomainNameLabel** (Azure PowerShell), the **-d** parameter (Azure Classic CLI), or the **--dns-name** parameter (Azure CLI) as shown in the following examples.
5755
56+
### Add reverse DNS for an public IP address with an existing name
57+
58+
Use the following procedures if a public IP address already has a [defined name](#validation-of-reverse-dns-records) in your subscription or via forward DNS lookup.
59+
5860
#### Azure PowerShell
5961

60-
To update reverse DNS to an existing PublicIpAddress:
62+
To update reverse DNS on a public IP address with an existing PTR:
6163

6264
```azurepowershell-interactive
6365
$pip = Get-AzPublicIpAddress -Name "PublicIp" -ResourceGroupName "MyResourceGroup"
6466
$pip.DnsSettings.ReverseFqdn = "contosoapp1.westus.cloudapp.azure.com."
6567
Set-AzPublicIpAddress -PublicIpAddress $pip
6668
```
6769

68-
To add reverse DNS to an existing PublicIpAddress that doesn't already have a DNS name, you must also specify a DNS name:
70+
To add reverse DNS to an a public IP address that doesn't already have a PTR, you must specify the DomainNameLabel:
6971

7072
```azurepowershell-interactive
7173
$pip = Get-AzPublicIpAddress -Name "PublicIp" -ResourceGroupName "MyResourceGroup"
@@ -77,34 +79,37 @@ Set-AzPublicIpAddress -PublicIpAddress $pip
7779

7880
#### Azure Classic CLI
7981

80-
To add reverse DNS to an existing PublicIpAddress:
82+
To update reverse DNS on a public IP address with an existing PTR:
8183

8284
```azurecli
8385
azure network public-ip set -n PublicIp -g MyResourceGroup -f contosoapp1.westus.cloudapp.azure.com.
8486
```
8587

86-
To add reverse DNS to an existing PublicIpAddress that doesn't already have a DNS name, you must also specify a DNS name:
88+
To add reverse DNS to an a public IP address that doesn't already have a PTR, you must specify the DNS name (-d):
8789

8890
```azurecli-interactive
8991
azure network public-ip set -n PublicIp -g MyResourceGroup -d contosoapp1 -f contosoapp1.westus.cloudapp.azure.com.
9092
```
9193

9294
#### Azure CLI
9395

94-
To add reverse DNS to an existing PublicIpAddress:
96+
To update reverse DNS on a public IP address with an existing PTR:
9597

9698
```azurecli-interacgive
9799
az network public-ip update --resource-group MyResourceGroup --name PublicIp --reverse-fqdn contosoapp1.westus.cloudapp.azure.com.
98100
```
99101

100-
To add reverse DNS to an existing PublicIpAddress that doesn't already have a DNS name, you must also specify a DNS name:
102+
To add reverse DNS to an a public IP address that doesn't already have a PTR, you must specify the DNS name (--dns-name):
101103

102104
```azurecli-interactive
103105
az network public-ip update --resource-group MyResourceGroup --name PublicIp --reverse-fqdn contosoapp1.westus.cloudapp.azure.com --dns-name contosoapp1
104106
```
105107

106108
### Create a public IP address with reverse DNS
107109

110+
> [!NOTE]
111+
> If the public IP address already exists in your subscription, see [Add reverse DNS for an public IP address with an existing name](#add-reverse-dns-for-an-public-ip-address-with-an-existing-name).
112+
108113
To create a new PublicIpAddress with the reverse DNS property already specified:
109114

110115
#### Azure PowerShell
@@ -127,7 +132,7 @@ az network public-ip create --name PublicIp --resource-group MyResourceGroup --l
127132

128133
### View reverse DNS for an existing public IP address
129134

130-
To view the configured value for an existing PublicIpAddress:
135+
To view the configured reverse DNS value for an existing PublicIpAddress:
131136

132137
#### Azure PowerShell
133138

0 commit comments

Comments
 (0)