https://imds.foo/tags/detection/Recent content in Detection on imds.fooHugoen-usMon, 05 Oct 2026 19:36:38 +0200https://imds.foo/posts/cross-tenant-dns-forwarding/Wed, 02 Sep 2026 00:00:00 +0000https://imds.foo/posts/cross-tenant-dns-forwarding/<p>My last post on cross-tenant DNS zones naturally leads to the question if other Azure DNS resources have the same visibility issue. One resource of great interest: Private DNS resolvers. DNS resolvers are basically the DNS plumbing Azure provides. You deploy a private one if you have inbound or outbound DNS queries requiring a more complex setup. For example from your on-premise datacenter to an IP in a delegated inbound endpoint subnet, which allows your on-prem infrastructure to resolve names in your Azure private zones. Outbound endpoints in combination with a resource called forwarding ruleset allow you to send Azure DNS queries to on-prem or 3rd party DNS servers. Forwarding rulesets basically define which queries get sent where.</p>