An Azure service that enables hosting Domain Name System (DNS) domains in Azure.
If the name servers changed but resolution did not fully move, check these items in order:
- Verify the Azure DNS zone contents. In the Azure portal, confirm the zone name, record names, and record types were imported correctly. A common issue is that the NS delegation changed, but the target zone in Azure is missing records or has incorrect names.
- Test the Azure DNS name servers directly. Query the Azure-assigned name servers for the fully qualified record name and correct record type. This confirms whether Azure DNS is serving the expected records.
- Confirm delegation at the registrar is complete. The domain must be delegated to the Azure DNS name servers shown in the Azure portal. If delegation is incomplete or still points partly to the old provider, resolution can be inconsistent.
- Avoid split delegation between old and new providers. Keeping some name servers on the old provider and some on Azure can cause intermittent failures because resolvers may query either set. The zone data must be identical during transition, or delegation should be switched cleanly to the Azure DNS name servers.
- Flush caches and retest.
If records were recently changed, cached results can make it look like the move failed.
On Windows:
ipconfig /flushdns Clear-DnsClientCache - Compare resolution paths.
From a Windows client, first see which resolver is being used:
Then test resolution:Get-DnsClientServerAddress -AddressFamily IPv4 ipconfig /all | Select-String "DNS Servers"
If the public resolver sees the new records but the default resolver does not, that points to caching or an upstream resolver delay.Resolve-DnsName www.contoso.com Resolve-DnsName www.contoso.com -Server 1.1.1.1 - If queries time out instead of returning old data, test port 53 reachability.
In Azure, also review effective NSG rules on the VM NIC and confirm outbound UDP and TCP 53 are allowed to the DNS server being queried.Test-NetConnection 168.63.129.16 -Port 53
If the Azure name servers answer correctly for the records, but some clients still see old results after only a few hours, that is consistent with propagation or caching. If the Azure name servers do not answer correctly, the issue is configuration or delegation rather than propagation.