We have an Azure-hosted service behind a private endpoint. It resolves to the expected private IP from a VM in the same virtual network, but clients on our office network sometimes get the public address or fail to resolve it at all.

How are others handling private endpoint DNS across Azure and on-premises networks? I’m especially interested in how you connect the private DNS zones to your on-prem DNS servers and keep resolution consistent when there are several virtual networks involved.