Logo

DNS Record Types Guide

Complete reference for DNS record types with examples, syntax, and best practices

Common DNS Record Types

A Record

Address Record

A

Maps a domain name to an IPv4 address (32-bit). This is the most common DNS record type.

Example

example.com → 192.0.2.1

DNS Zone Syntax

example.com. 300 IN A 192.0.2.1

Common Usage

Used to point domain names to IPv4 addresses where websites or services are hosted.

Typical TTL

300-3600 seconds (5 minutes to 1 hour)

AAAA Record

IPv6 Address Record

AAAA

Maps a domain name to an IPv6 address (128-bit). Essential for IPv6 connectivity.

Example

example.com → 2001:db8::1

DNS Zone Syntax

example.com. 300 IN AAAA 2001:db8::1

Common Usage

Used to point domain names to IPv6 addresses for modern internet infrastructure.

Typical TTL

300-3600 seconds (5 minutes to 1 hour)

CNAME Record

Canonical Name Record

CNAME

Creates an alias from one domain name to another. Points to another domain rather than an IP.

Example

www.example.com → example.com

DNS Zone Syntax

www.example.com. 300 IN CNAME example.com.

Common Usage

Used for subdomains, CDN aliases, and service redirections. Cannot coexist with other record types.

Typical TTL

300-86400 seconds (5 minutes to 24 hours)

MX Record

Mail Exchange Record

MX

Specifies mail servers responsible for receiving email for a domain, with priority values.

Example

example.com → 10 mail.example.com

DNS Zone Syntax

example.com. 3600 IN MX 10 mail.example.com.

Common Usage

Essential for email delivery. Lower priority numbers indicate higher preference.

Typical TTL

3600-86400 seconds (1-24 hours)

NS Record

Name Server Record

NS

Delegates a DNS zone to use the given authoritative name servers.

Example

example.com → ns1.nameserver.com

DNS Zone Syntax

example.com. 86400 IN NS ns1.nameserver.com.

Common Usage

Defines which DNS servers are authoritative for a domain or subdomain.

Typical TTL

86400-604800 seconds (1-7 days)

TXT Record

Text Record

TXT

Stores arbitrary text data. Used for verification, security policies, and configuration.

Example

example.com → "v=spf1 include:_spf.google.com ~all"

DNS Zone Syntax

example.com. 300 IN TXT "v=spf1 include:_spf.google.com ~all"

Common Usage

SPF records, DKIM keys, domain verification, DMARC policies, and other text-based configurations.

Typical TTL

300-3600 seconds (5 minutes to 1 hour)

SOA Record

Start of Authority Record

SOA

Contains administrative information about the DNS zone, including serial number and timers.

Example

example.com → ns1.example.com admin.example.com 2024010101...

DNS Zone Syntax

example.com. 86400 IN SOA ns1.example.com. admin.example.com. 2024010101 3600 1800 604800 86400

Common Usage

Appears at the beginning of every DNS zone. Contains zone transfer and caching parameters.

Typical TTL

86400-604800 seconds (1-7 days)

SRV Record

Service Record

SRV

Defines the hostname and port number for specific services within a domain.

Example

_sip._tcp.example.com → 10 5 5060 sip.example.com

DNS Zone Syntax

_sip._tcp.example.com. 300 IN SRV 10 5 5060 sip.example.com.

Common Usage

Used for service discovery (SIP, XMPP, etc.). Format: priority weight port target.

Typical TTL

300-3600 seconds (5 minutes to 1 hour)

NAPTR Record

Name Authority Pointer Record

NAPTR

Used for complex service discovery and protocol selection, often in telecommunications.

Example

example.com → 100 10 "u" "E2U+sip" "!^.*$!sip:[email protected]!" .

DNS Zone Syntax

example.com. 3600 IN NAPTR 100 10 "u" "E2U+sip" "!^.*$!sip:[email protected]!" .

Common Usage

Advanced service discovery, ENUM services, and protocol mapping in telecom applications.

Typical TTL

3600-86400 seconds (1-24 hours)

PTR Record

Pointer Record

PTR

Used for reverse DNS lookups, mapping IP addresses back to domain names.

Example

1.2.0.192.in-addr.arpa → example.com

DNS Zone Syntax

1.2.0.192.in-addr.arpa. 3600 IN PTR example.com.

Common Usage

Essential for email servers, security verification, and network troubleshooting.

Typical TTL

3600-86400 seconds (1-24 hours)

DNSSEC & Security Records

CAA

Certification Authority Authorization

Specifies which certificate authorities are allowed to issue certificates for the domain.

Example: example.com → 0 issue "letsencrypt.org"
Usage: Enhances security by restricting which CAs can issue SSL/TLS certificates for your domain.
DNSKEY

DNS Key Record

Contains public keys used for DNSSEC validation of the zone.

Example: Contains cryptographic public key data for DNSSEC
Usage: Part of DNSSEC infrastructure to ensure DNS response authenticity.
DS

Delegation Signer

Links a delegated zone to its DNSSEC-signed parent zone.

Example: Contains hash of DNSKEY record from child zone
Usage: Establishes chain of trust in DNSSEC between parent and child zones.
RRSIG

Resource Record Signature

Contains DNSSEC signature for a set of DNS records with the same name and type.

Example: Cryptographic signature of DNS records
Usage: Provides cryptographic proof that DNS records are authentic and unmodified.

DNS Record Best Practices

TTL Management

  • • Use shorter TTLs (300s) during migrations
  • • Longer TTLs (3600s+) for stable records
  • • Consider caching implications
⚠️

Common Pitfalls

  • • Don't mix CNAME with other records
  • • Always end hostnames with a dot
  • • Test changes in staging first

Security Tips

  • • Implement DNSSEC when possible
  • • Use CAA records for SSL security
  • • Monitor DNS changes regularly

Test Your DNS Records

Use our DNS lookup tools to test and validate your DNS records across different record types and global resolvers.