Setting up a domain controller in an Azure Virtual Network, how should I configure the DNS Server List?

Question

I've set up a simple Azure Virtual Network (VN) consisting of a single domain controller and a few clients. Now I need to know how to configure the VN's DNS Server List. Here are the two options I've tried:

1. Make the DC the only IP in the list of DNS servers. Initially this seems like the most obvious way to configure the VN, but it appears to block outbound DNS, making the Internet basically inaccessible. From the command line of any VM in the VN, nslookup works against the DC but fails against any other DNS server, including Azure's built-in DNS. For all intents and purposes outgoing DNS appears to be blocked in this configuration.

2. Set the DC's IP first in the list, then Azure's built-in DNS. This approach allows outgoing DNS to Azure's built-in DNS from any VM in my VN, but it feels strange to set up my clients with two DNS servers, one of which is my DC and one of which is external to my network. Is this the way a domain should be configured?

Ideally, I'd like all the VMs in my VN to use my DC for DNS, and for the DC to forward unknown domains to Azure's built-in DNS server, but I can't seem to find a way to do that.

Solution

As of 5/8/2014 Azure Virtual Network is no longer blocking outgoing DNS, so you can set up your DNS forwarders normally.

I selected public DNS servers from this list: http://theos.in/windows-xp/free-fast-public-dns-server-list/

Comments

[MichelZ]

Have you configured Azure DNS as DNS forwarder in your own DNS?

[Mike]

Yes, but it doesn't work unless that Azure DNS is in the VN's DNS Server List. That's my problem.

[CodeCowboyOrg]

This is what worked for me, I created an DNS (10.1.1.10) for my internal network right on my Domain controller. On the DNS, I set the forward DNS to 8.8.8.8 which is the Google DNS for external domains. On the Azure Management Console for the Virtual Network I set the DNS to be my internal DNS (10.1.1.10). Prior to this I set "static" ips for the VMs, and they all registered with the DNS automatically after joining the Domain.

[CodeCowboyOrg]

If the exact steps on how to do this, I created a YouTube video. Google these exact words, and its first on the list "YouTube CodeCowboyOrg Azure - How to Setup a DNS Server in a Virtual Network"