Family of Azure services for hosting and resolving DNS, covering public zones, private zones and DNS Private Resolver; you can't register domain names through it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Azure DNS in context, with comparison tables and the common traps.
Terms in this definition
- DNS
The system that turns names into addresses. In Azure, private endpoints depend on private DNS zones, which are queried through 168.63.129.16.
- Domain
A way of grouping workspaces by area of the business, in support of a data mesh approach. Items take on their workspace's domain, letting you filter the OneLake catalog by it, and certain tenant settings can be passed to domain admins; domains have no effect on access permissions.
Related terms
- Alias record
In Azure DNS, a record set that targets an Azure resource itself (say, a CDN endpoint or public IP) rather than a fixed address, so it stays correct whenever that resource gets a new IP. Bare apex domains can use one to reach such a resource.
- Apex domain
The bare domain without any subdomain (example.com), also known as the zone apex or root domain. Since a CNAME is not allowed there, routing it to a service like Front Door relies on CNAME flattening or Azure DNS alias records.
- Application routing add-on
Managed NGINX ingress for AKS, deployed and run as an add-on, integrated with Azure DNS and with certificates held in Key Vault. Its NGINX version is supported only until the end of November 2026, after which the Gateway API version takes over.
- az network dns zone import
Single Azure CLI step that reads a BIND-format zone file and either builds a new Azure DNS zone from it or merges its records into an existing one.
- Azure Private DNS
The part of Azure DNS that hosts private zones, giving name resolution within linked virtual networks without running your own DNS servers. It can also add records for VMs automatically through autoregistration.
- Azure reserved addresses
Five addresses in each subnet that Azure keeps for itself: the network address, the default gateway, two for Azure DNS and the broadcast address. A /24 therefore offers 251 usable addresses and a /29 only 3; IPv4 subnets of /30 or /31 aren't allowed.
- DNS Manager
The DNS management console in Windows Server; it has no way to publish zones into Azure DNS.
- DNS proxy
Azure Firewall policy option under which clients send DNS queries to port 53 on the firewall's private IP, and the firewall passes them on to its own DNS servers (Azure DNS by default). FQDN-based network rules need it, and on-premises resolvers may forward to it.