Your organization is integrating an on-premises data center with a Google Cloud Virtual Private Cloud (VPC) network over Cloud Interconnect. You need to enable on-premises clients to resolve internal Cloud DNS zone records ending in `internal.example.com`. Place the deployment steps in the correct chronological order from first to last to complete this configuration.
- 1Create a Cloud DNS server policy on the VPC network with the inbound DNS forwarding feature enabled.
- 2Retrieve the reserved inbound DNS forwarder IP addresses assigned to the VPC subnets.
- 3Configure the on-premises DNS server conditional forwarders to direct queries for `internal.example.com` to the retrieved Cloud DNS inbound forwarder IP addresses.
- 4Execute a DNS query from an on-premises client host to verify internal record resolution for a host in `internal.example.com`.
Answer
The correct sequence starts by enabling inbound DNS forwarding via a Cloud DNS server policy on the VPC network, retrieving the allocated inbound forwarder IP addresses, configuring on-premises DNS conditional forwarding to those IP addresses, and finally testing resolution from an on-premises host.
Configuring hybrid DNS resolution requires provisioning the cloud infrastructure first (Cloud DNS server policy with inbound forwarding), identifying the generated inbound forwarder IP addresses, configuring the on-premises DNS server to use those IPs as conditional forwarders, and finally verifying connectivity from an on-premises client.
Step-by-Step Solution
Key Concept
Cloud DNS Inbound Forwarding Configuration for Hybrid Cloud Environments