DNS turns names like www.example.com into IP addresses. In Azure, “Azure DNS server” usually means one of four things: Azure DNS public zones (host your internet domains), Private DNS zones (names inside your VNets), DNS Private Resolver (connect Azure and on-premises DNS) and the built-in Azure-provided DNS every VNet gets.
📑 On this page · 6 sections
Azure DNS options explained
1. Public DNS zones
Host records for your public domain on Microsoft’s global name servers
Manage A, AAAA, CNAME, MX, TXT and more
Alias records point to public IPs, Front Door or Traffic Manager
You still buy the domain from a registrar
2. Private DNS zones
Custom names inside your VNets, e.g. db.internal.contoso.com
Not exposed to the internet
Used for private endpoints, e.g. privatelink.blob.core.windows.net
3. DNS Private Resolver
On-premises servers resolve Azure private names
Azure resources resolve on-premises names
No DNS VMs to run
4. Azure-provided DNS
Automatic for every VNet
Uses the special address 168.63.129.16
Switch to custom DNS servers if needed
Why network administrators use Azure DNS
Simple management
One place for records, with RBAC and activity logs.
High availability
Global, resilient DNS network.
Fast responses
Answered from the nearest name server.
Security
RBAC, resource locks and private zones.
Automation
CLI, PowerShell, Bicep or Terraform.
Private DNS for VNets and hybrid networks
Azure-provided DNS
db.internal.contoso.com
Storage, SQL over private IP
On-prem ↔ Azure names
🌐 Want to set up DNS zones, private endpoints and hybrid resolution in labs? Join a free demo class.
Book a free demoHow to create a public DNS zone
Create
In the portal, search DNS zones and click Create.
Name it
Pick a resource group and enter your domain name.
Note name servers
Copy the four Azure name servers.
Update registrar
Replace the name servers at your domain registrar.
Add records
A (website), CNAME, MX (email) and others.
az network dns zone create -g rg-dns -n example.comBest practices for Azure DNS
✅ ✅ Checklist: Put resource locks on production zones • use private zones for internal names and private endpoints • keep DNS records in code • use the Private Resolver for hybrid networks instead of custom DNS VMs.
Related networking guides
Read Azure virtual networks, Azure Firewall pricing and Azure networking certification.
Frequently asked questions
What is Azure DNS?
A Microsoft service that hosts DNS zones and answers DNS queries using Azure’s global name servers.
Can I buy a domain in Azure DNS?
Azure DNS hosts zones. You buy the domain from a registrar and point it to Azure’s name servers.
What is a private DNS zone?
A DNS zone visible only inside linked virtual networks, used for internal names and private endpoints.
What is Azure DNS Private Resolver?
A managed service that lets Azure and on-premises networks resolve each other’s private names without DNS VMs.
What is 168.63.129.16?
The virtual IP Azure uses to provide built-in DNS and other platform services to VNets.