1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122

@description('Name of the DNS Private Resolver')
param resolverName string = 'myDNSResolver'

@description('Resource Deployment Location')
param location string = resourceGroup().location

@description('Virtual Network Name')
param virtualNetworkName string = 'MyVNet'

@description('Subnet IDs for Inbound and Outbound Endpoints')
param inboundSubnetName string = 'myDNSResolverInboundSubnet'

@description('Subnet IDs for Inbound and Outbound Endpoints')
param outboundSubnedName string = 'myDNSResolverOutboundSubnet'

@description('Name of the DNS Forwarding Ruleset')
param forwardingRulesetName string = 'myForwardingRuleset'

@description('Name of the DNS Forwarding Rule')
param forwardingRuleName string = 'myForwardingRule'

@description('Domain Name for the Forwarding Rule')
param DomainName string = 'corp.contoso.com.' //Requires a TRAILING .

@description('Target DNS Servers for the Forwarding Rule')
param targetDNS array = [
  {
    ipaddress: '10.0.0.4' //Ip Address of my Azure DNS Server
    port: 53 //UDP Port used for DNS queries
  }
]

@description('Name of the Virtual Network Link')
param resolvervnetlink string = 'myVNetLink'

// Get the existing Virtual Network resource
resource vnet 'Microsoft.Network/virtualNetworks@2024-05-01' existing = {
  name: virtualNetworkName
}

// Get the existing Virtual Network Inbound & Outbound Sunbets
resource inboundSubnet 'Microsoft.Network/virtualNetworks/subnets@2024-05-01' existing = {
  name: inboundSubnetName
  parent: vnet
}

resource outboundSubnet 'Microsoft.Network/virtualNetworks/subnets@2024-05-01' existing = {
  name: outboundSubnedName
  parent: vnet
}

// Create a DNS Private Resolver
resource dnsResolver 'Microsoft.Network/dnsResolvers@2022-07-01' = {
  name: resolverName
  location: resourceGroup().location
  properties: {
    virtualNetwork: {
      id: vnet.id
    }
  }
}

// Create Inbound and Outbound Endpoints
resource inboundEndpoint 'Microsoft.Network/dnsResolvers/inboundEndpoints@2022-07-01' = {
  name: 'inbound-endpoint'
  parent: dnsResolver
  location: location
  properties: {
    ipConfigurations: [
      {
        subnet: {
          id: inboundSubnet.id
        }
      }
    ]
  }
}

resource outboundEndpoint 'Microsoft.Network/dnsResolvers/outboundEndpoints@2022-07-01' = {
  name: 'outbound-endpoint'
  parent: dnsResolver
  location: location
  properties: {
    subnet: {
      id: outboundSubnet.id
    }
  }
}

// Create DNS Forwarding Ruleset
resource fwruleSet 'Microsoft.Network/dnsForwardingRulesets@2022-07-01' = {
  name: forwardingRulesetName
  location: location
  properties: {
    dnsResolverOutboundEndpoints: [
      {
        id: outboundEndpoint.id
      }
    ]
  }
}

// Create a Virtual Network Link for the Forwarding Ruleset
resource resolverLink 'Microsoft.Network/dnsForwardingRulesets/virtualNetworkLinks@2022-07-01' = {
  parent: fwruleSet
  name: resolvervnetlink
  properties: {
    virtualNetwork: {
      id: vnet.id
    }
  }
}

// Add a Rule to the Forwarding Ruleset
resource fwRules 'Microsoft.Network/dnsForwardingRulesets/forwardingRules@2022-07-01' = {
  parent: fwruleSet
  name: forwardingRuleName
  properties: {
    domainName: DomainName
    targetDnsServers: targetDNS
  }
}