DNS will not function properly without careful configuration using a DNS Resolver. Ensure you integrate the resolver correctly to handle name resolution within the network.
Manually configuring your OS' hosts file will also work as long as the resource's IP address is routable. See principal 3.
Delegated Subnets & VNet Traffic:
If multiple delegated subnets exist within the same Virtual Network (VNet), the default Network Security Group (NSG) rules permit unrestricted traffic between them. This means resources within those subnets can freely communicate unless additional rules are applied.
VPN Access to 10.0.0.0/8 Subnets:
Subnets within the 10.0.0.0/8 range are typically accessible from your workstation via a VPN.
Private Endpoint (PEP) Requirement for External Access:
To access a resource from your desktop the resource my be in the 10.0.0.0/8 subnet, a Private Endpoint (PEP) must be configured to associate a 10.x IP address with the resource.
This allows secure communication to Azure resources, especially databases and services outside that range.
Reference: See Principle 1 regarding DNS resolver.
PEP Exemption for Same VNet Resources:
A PEP is not necessary when the resources are within subnets of the same VNet, as communication is allowed by default and you do not need to access the resource directly from your workstation.
