AAD Domain Services - Custom DNS records keep disappearing

[Magnus Tjerneld]

We are running Azure AD Domain Services (AADDS) to manage a few legacy application servers as part of our Azure infrastructure. In order for VNET-integrated Web Apps to find internal API:s using the VNET integration we've added a few custom Forward Lookup Zones for these specific hosts in the AADDS DNS. At seemingly random times (maybe once a week), the A-records in these zones are deleted in the DNS server, although the zones remain.

Can anyone help me explain wht this happens and how we can prevent it? Azure Web Apps does not contain a hosts-file, so we are dependent on DNS for lookups.

Thanks in advance,

Magnus

[#2]

I think you are better off using conditional forwarders to point to a DNS server for record resolution.

You need to be very careful not to any other zones into the managed domain since AD DS DNS should only contain the managed domain.

[#3]

The reason was that custom zones in AADDS DNS is not supported. The solution was to implement an Azure Private DNS zone and associate it with the virtual network. Works like a charm.