I was looking for old threads to see if I could spot a solution and found this:
Sorry I might have misled you.
Another possibility I can think of is that you could setup wireguard on Vercel so you have access there to our internal DNS but I’m not sure if this is possible too.