| author | dlepow |
|---|---|
| ms.service | azure-api-management |
| ms.topic | include |
| ms.date | 06/20/2025 |
| ms.author | danlep |
While you have the option to use a private or custom DNS server, we recommend:
- Configure an Azure DNS private zone.
- Link the Azure DNS private zone to the virtual network.
Learn how to set up a private zone in Azure DNS.
Note
If you configure a private or custom DNS resolver in the virtual network used for injection, you must ensure name resolution for Azure Key Vault endpoints (*.vault.azure.net). We recommend configuring an Azure private DNS zone, which doesn't require additional configuration to enable it.