如何确保私有 DNS 区域正在解析给定的私有 IP?

How to make sure a Private DNS zone is resolving a given private ip?

这里的用例场景是私有 DNS 解析一个内部 IP 作为 API 管理器的默认网关 - APIM.

在 APIM 前面,有一个应用程序网关,其后端池以私有 DNS 为目标。

我可以看到后端健康状态是 unknown,它可能与 FQDN 有关 - 与内部 Ip 关联,未被解析,但我如何确保它是实际的有问题吗?

您可以尝试以下任一方法来确保私有 DNS 区域正在解析给定的私有 IP。

Workaround 1:

  1. Create an Azure VNet with a DNS private zone like private.test.com.
  2. Create a VM and a VPN gateway on that VNet. Enable VNet integration.
  3. with my Azure web app service.

Workaround 2:

  1. Deploy new Azure Private DNS Zones in your Azure environment part of private endpoint deployment. (Default option)
  2. Use existing Azure Private DNS Zones. Use this option if you using a private endpoint in a hub-and-spoke model from a different subscription or even within the same subscription.
  3. Use your own DNS Servers if you do not use DNS forwarders and instead you manage A records directly in your on-premises DNS servers.

参考:Azure DNS zone record not resolving to specified IP from App service to Virtual Machine - Stack Overflow and Configure DNS Name Resolution for private endpoints - Azure Purview | Microsoft Docs