Hybrid DNS Query Flow: On-Premises to Azure

In a hybrid environment, name resolution allows resources on-premises and in Azure to find each other using readable domain names. When an on-premises client requests the address of an Azure resource, the query first reaches a local DNS server. Because the local server does not natively know Azure's private addresses, administrators configure a conditional forwarder to send these specific queries to Azure. Traffic flows across the hybrid connection to an Azure DNS Private Resolver or a custom DNS virtual machine located in Azure. This resolver then queries Azure Private DNS zones to find the correct private IP address and returns it to the on-premises client.