Azure DNS Private Resolver Hybrid Architecture

For hybrid networks where Azure resources need to talk to on-premises servers and vice versa, the Azure DNS Private Resolver is a key managed service. It replaces the need to run your own DNS servers on virtual machines. The resolver uses two main components: inbound endpoints and outbound endpoints. An inbound endpoint gives you an IP address inside your Azure virtual network where your on-premises DNS servers can send queries. An outbound endpoint lets your Azure resources send queries out to your on-premises or other external DNS servers.