How Do VMware Solutions on Azure Forward DNS Queries?

It sounds like you're looking for an Azure DNS Private Resolver. Essentially, when your AVS VMs make DNS requests, they route through the NSX-T DNS service, which then forwards those queries to the Azure DNS Private Resolver. From there, it can either go to a private DNS zone or a public DNS server depending on the configuration. Just remember that the flow goes like this: AVS VM -> NSX-T DNS Service -> Azure DNS Private Resolver -> Azure Private DNS Zone or Public DNS.

You're on the right track! When a VM sends a DNS request, it goes to the NSX-T DNS service first, then the NSX-T gateway forwards that request to the Azure DNS Private Resolver or directly to an internal DNS server. If it's using Gen2, keep in mind that NSX-T can already manage conditional forwarding, so in many cases, using the Private Resolver might not even be necessary.

For DNS resolution in Azure, remember a couple of key points: 1. To resolve Azure resource IPs, you need a private DNS zone and the DNS query targeting the Azure WireServer VIP (168.63.129.16). 2. For on-premise IP resolutions, DNS queries need to reach on-premise DNS resolvers. The Private DNS Resolver acts as a bridge here by allowing specific domain rules to route queries to the appropriate resolver IPs. Make sure you configure it based on your needs!