Internal DNS
10.1.0.254

Client VM
10.1.0.10

Azure DNS
Private Resolver
10.0.1.254

Private endpoint
10.0.0.10

DNS

DNS

DNS

DNS resolution flow
1. DNS query for sql-server.database.windows.net
2. Conditional Forward for database.windows.net to 10.0.1.254
3. Private Resolver at 10.0.1.254 sends DNS query to 168.63.129.16
4. Authoritative DNS query for sql-server.database.windows.net Response: CNAME sql-server.privatelink.database.windows.net
5. DNS query for sql-server.privatelink.database.windows.net Response: private ip address 10.0.0.10
6 7 8 Response: CNAME sql-server.privatelink.database.windows.net A sql-server.privatelink.database.windows.net 10.0.0.10
9 Private connection to 10.0.0.10

→ DNS traffic
--- Virtual network link
··· Private connection