A virtual network cannot be linked to multiple zones with overlapping namespaces.

Nico Albarracin 0 Reputation points
2025-06-11T17:40:42.8833333+00:00

I'm trying to create a Virtual Network Link to the private DNS zone privatelink.azurewebsites.net, but I consistently receive the following error:

"A virtual network cannot be linked to multiple zones with overlapping namespaces. You tried to link virtual network with 'privatelink.azurewebsites.net' and 'privatelink.azurewebsites.net' zones."


Context:

At one point, we accidentally had two private DNS zones named privatelink.azurewebsites.net in our environment.

We attempted to create a VNet link to one of them, but it failed.

We then deleted the duplicate DNS zone, expecting the issue to be resolved.

However, now whenever we try to create a new VNet link to the remaining privatelink.azurewebsites.net zone, we still get the same error, even though only one zone with that name exists, and no links show up in the portal or via CLI.


Steps Already Taken:

Confirmed via az network private-dns link vnet list that there are no active VNet links

Verified that only one privatelink.azurewebsites.net zone exists in the subscription

Checked for resource locks or leftover private endpoint bindings

  • Attempted deletion and recreation of the DNS zone (still blocked)I'm trying to create a Virtual Network Link to the private DNS zone privatelink.azurewebsites.net, but I consistently receive the following error:

    "A virtual network cannot be linked to multiple zones with overlapping namespaces. You tried to link virtual network with 'privatelink.azurewebsites.net' and 'privatelink.azurewebsites.net' zones."

Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
{count} votes

1 answer

Sort by: Most helpful
  1. G Sree Vidya 4,080 Reputation points Microsoft External Staff Moderator
    2025-06-12T05:06:21.86+00:00

    Hello @Nico Albarracin

    I understand that you are facing issue with the Virtual Network Link.

    "A virtual network cannot be linked to multiple zones with overlapping namespaces..."

    This caused by Azure's restriction that a single virtual network (VNet) cannot be linked to more than one Private DNS Zone with the same namespace, even if the zones were previously deleted or appear to be gone.

    Even though you've deleted the duplicate privatelink.azurewebsites.net zone, Azure may still have residual metadata or stale link references associated with the VNet. These can persist in the background and block new links from being created.

    1.Use one privatelink.azurewebsites.net zone across all subscriptions and link it to all relevant VNETs. Avoid creating multiple zones with the same name as per the Microsoft document:

    Refer: https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns-integration

    Sharing you the similar thread for your reference: https://learn.microsoft.com/en-us/answers/questions/861192/deployment-failed-a-virtual-network-cannot-be-link

    Here how you can fix using below steps:

    1. Even if you see only one privatelink.azurewebsites.net zone in your current subscription, there might be:
    • A duplicate zone in another subscription or resource group
    • A zombie link that was not properly deleted

    Use this command to list all private DNS zones across subscriptions (if you have access):

    1. az`` network private-dns zone list --query "[?name=='privatelink.azurewebsites.net']"
    2. Use Azure CLI to forcefully delete any ghost links: If you find any links, delete them using:
    az`` network private-dns link vnet delete \
      ``--resource-group <resource-group-name> \
      ``--zone-name privatelink.azurewebsites.net \
      ``--name <link-name>
    
    1. Check for links in other subscriptions or regions: Sometimes the conflict comes from a zone or link in a different subscription or resource group that’s still active.

    Wait for propagation: After deleting a DNS zone or link, it can take a few minutes to fully propagate. Wait 10–15 minutes before retrying the link creation.

    If all else fails:

    • Try creating a new VNet and linking it to the DNS zone to confirm the issue is with the original VNet.
    • Or open a Microsoft support ticket to clear any hidden metadata.

    I hope this information is helpful! If my answer helped you resolve your issue, please consider marking it as the correct answer or Upvote. This helps others in the community find solutions more easily. Thanks!

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.