Overview
Azure DNS hosts your DNS zones inside Azure, so records are managed with the same Entra ID credentials, Azure Resource Manager templates, billing and support contract as the rest of your Azure resources. Public zones are served by Microsoft's global anycast name servers, and new records are live within a few seconds.
Private zones resolve names inside virtual networks and can share a name with a public zone for split-horizon DNS. Azure DNS Private Resolver forwards queries between Azure and on-premises networks, and DNS security policies can filter queries from virtual networks.
Billing is per zone ($0.50 a month for the first 25, then $0.10) plus per million queries, prorated daily. There is no free tier, and you need a registrar elsewhere because Azure DNS does not sell domains.
Because Azure's public pricing page did not show numbers when read, check the Azure pricing calculator for your region and agreement. Private Resolver endpoints are the costly part at $180 a month per inbound endpoint, so hybrid designs should size them carefully.
Pricing and plans
checked 28 Sept 2026| Plan | Price | What you get |
|---|---|---|
| Hosted zones | $0.50/zone/mo | First 25 zones, public or private; $0.10 per zone after |
| Queries | Per million | Private-zone queries $0.40 per million; public query rate not captured |
| DNS Private Resolver | $180/mo per inbound endpoint | Forwarding rulesets $2.50/mo |
What it does
- Anycast public DNS
- Queries route to the nearest Microsoft name server; new records propagate in seconds.
- Private zones
- Name resolution within and between virtual networks, with split-horizon support.
- Private Resolver
- Managed forwarding between Azure and on-premises DNS without running your own servers.
- DNS security policy
- Filter DNS queries from virtual networks against domain lists.
- Azure integration
- Same credentials, billing, templates and support contract as other Azure services.
Strengths and limitations
Strengths
- Low per-zone price with daily proration.
- Public and private DNS in one service with split-horizon support.
- Managed through Azure RBAC, ARM/Bicep and Terraform.
- Records update within seconds.
Limitations
- No free tier.
- Cannot register domain names; use a separate registrar.
- Private Resolver endpoints cost $180 a month each.
- Advanced traffic steering needs separate products such as Traffic Manager or Front Door.
Who it suits
Good for
- Applications running on Azure
- Hybrid networks with on-premises DNS
- Teams using Azure RBAC for DNS changes
Look elsewhere if
- Hobby projects wanting free DNS
- Teams needing geo or latency routing inside the DNS service itself
Alternatives to Azure DNS
| Tool | From | Free option | Stages |
|---|---|---|---|
| Amazon CloudFront CDN with bundled WAF and DNS plans | $15/mo | Free tier | |
| Amazon Route 53 Managed DNS and traffic routing | $0.5/mo | ||
| Cloudflare CDN, DNS, WAF and DDoS protection | $20/mo | Free tier | |
| DigiCert DNS (DNS Made Easy) Managed DNS with SLA | $300/yr | ||
| DNSimple DNS hosting and domain management | $0.5/mo | ||
| Gcore CDN Pay-as-you-go CDN with DNS and WAF | Usage-based | Free tier |
Questions
How much does Azure DNS cost?
$0.50 per zone per month for the first 25 zones, $0.10 after, plus per-million query charges.
Can I buy a domain with Azure DNS?
No. Microsoft states Azure DNS does not support purchasing domain names; use a registrar and delegate the zone.
Does Azure DNS support private zones?
Yes. Private zones resolve names within virtual networks and can share a name with a public zone.
Sources read for this page