3

I've set up a simple Azure Virtual Network (VN) consisting of a single domain controller and a few clients. Now I need to know how to configure the VN's DNS Server List. Here are the two options I've tried:

  1. Make the DC the only IP in the list of DNS servers. Initially this seems like the most obvious way to configure the VN, but it appears to block outbound DNS, making the Internet basically inaccessible. From the command line of any VM in the VN, nslookup works against the DC but fails against any other DNS server, including Azure's built-in DNS. For all intents and purposes outgoing DNS appears to be blocked in this configuration.

  2. Set the DC's IP first in the list, then Azure's built-in DNS. This approach allows outgoing DNS to Azure's built-in DNS from any VM in my VN, but it feels strange to set up my clients with two DNS servers, one of which is my DC and one of which is external to my network. Is this the way a domain should be configured?

Ideally, I'd like all the VMs in my VN to use my DC for DNS, and for the DC to forward unknown domains to Azure's built-in DNS server, but I can't seem to find a way to do that.

4
  • Have you configured Azure DNS as DNS forwarder in your own DNS?
    – MichelZ
    Apr 22, 2014 at 5:23
  • Yes, but it doesn't work unless that Azure DNS is in the VN's DNS Server List. That's my problem.
    – Mike
    Apr 22, 2014 at 13:31
  • 1
    This is what worked for me, I created an DNS (10.1.1.10) for my internal network right on my Domain controller. On the DNS, I set the forward DNS to 8.8.8.8 which is the Google DNS for external domains. On the Azure Management Console for the Virtual Network I set the DNS to be my internal DNS (10.1.1.10). Prior to this I set "static" ips for the VMs, and they all registered with the DNS automatically after joining the Domain. Sep 19, 2014 at 20:09
  • If the exact steps on how to do this, I created a YouTube video. Google these exact words, and its first on the list "YouTube CodeCowboyOrg Azure - How to Setup a DNS Server in a Virtual Network" Sep 19, 2014 at 20:12

3 Answers 3

1

As of 5/8/2014 Azure Virtual Network is no longer blocking outgoing DNS, so you can set up your DNS forwarders normally.

I selected public DNS servers from this list: http://theos.in/windows-xp/free-fast-public-dns-server-list/

0

Good Question! From what I can see, the Virtual Network is basically an isolation overlay. Unless you create a Site to Site VPN tunnel or define accessible DNS servers in the virtual network, there isn't a connection to the outside. In our environment, we tunnel to local DCs that forward queries to external DNS servers. Without that, I would say adding the Azure DNS to your VN DNS Server List is your solution.

0

Microsoft recommends using root hints with recursion (the default settings for recent Windows Server DNS versions) instead of explicit forwarder configuration for Azure-based DNS servers.

If you configured your DCs to also serve DNS (the dcpromo default), set your virtual network DNS servers to the appropriate DCs for clients on that subnet.

Don't set a non-DC DNS address on AD clients. Failing over to that address will break domain services (logon and authentication, among others).

The beauty of root hints and recursion is that you don't have to do anything but ensure that your clients can use the DC's DNS.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .