Reference

DNS Record Types

A comprehensive reference for the most common DNS record types — what each does, how it's structured, and when to use it.

Record Types

Common DNS Records

Select a record type for syntax, examples, and configuration guidance

AAddress

Maps a hostname to an IPv4 address. The most fundamental DNS record — the final answer for most web traffic.

thedns.guru. A 203.0.113.42
Learn More →
AAAAAddress

Maps a hostname to an IPv6 address. Required for dual-stack deployments as IPv4 address space exhaustion continues.

thedns.guru. AAAA 2001:db8::1
Learn More →
CNAMEAlias

Creates an alias from one hostname to another canonical name. Resolvers follow the chain until reaching an A/AAAA record.

www CNAME thedns.guru.
Learn More →
MXMail

Specifies the mail server(s) responsible for accepting email for a domain, with priority values for redundancy.

@ MX 10 mail.thedns.guru.
Learn More →
TXTText

Stores arbitrary text data. Used for SPF, DKIM public keys, DMARC policies, domain verification tokens, and more.

@ TXT "v=spf1 include:_spf.google.com ~all"
Learn More →
NSDelegation

Identifies the authoritative nameservers for a domain. These records define who has final authority for the zone.

@ NS ns1.example.com.
Learn More →
SOAZone

Start of Authority — contains zone metadata: primary nameserver, admin contact, serial number, and timing parameters.

@ SOA ns1.example.com. admin.example.com. 2024041201 3600 900 604800 300
Learn More →
PTRReverse DNS

Maps an IP address back to a hostname. Essential for mail server reputation, security logging, and network diagnostics.

42.113.0.203.in-addr.arpa. PTR thedns.guru.
Learn More →
SRVService

Locates services by protocol and port — used by SIP, XMPP, IMAP autodiscovery, Kubernetes, and other service-discovery systems.

_sip._tcp SRV 10 20 5060 sip.example.com.
Learn More →
CAASecurity

Restricts which Certificate Authorities are permitted to issue TLS certificates for your domain — a key defense against misissued certificates.

@ CAA 0 issue "letsencrypt.org"
Learn More →
Quick Reference

Record Type Cheat Sheet

TypeCategoryCan appear at apex (@)?Multiple records?Points to
AAddressYesYes (load balance)IPv4 address
AAAAAddressYesYes (load balance)IPv6 address
CNAMEAliasNo (use ALIAS/ANAME)NoHostname
MXMailYesYes (priority)Hostname (not IP)
TXTTextYesYesQuoted text string(s)
NSDelegationYes (zone NS)YesHostname
SOAZoneYes (required)No (exactly one)Zone metadata
PTRReverse DNSN/A (in-addr.arpa)NoHostname
SRVServiceNoYes (priority/weight)Priority + weight + port + hostname
CAASecurityYesYesCA hostname or report URL
Complete Registry

Full List of DNS Record Types

Beyond the common types covered here, DNS defines many additional record types

The ten record types on this page cover the vast majority of real-world DNS deployments, but the DNS protocol defines well over 80 resource record types in total — from legacy types that predate the modern internet to specialized types for DANE, DNSSEC key material, and experimental uses.

The authoritative list of all currently assigned DNS resource record types is maintained by IANA (Internet Assigned Numbers Authority) in the DNS Parameters registry. Each entry shows the type number, mnemonic, and the defining RFC.

The process for registering new DNS record types is defined in RFC 6895 — new types require IETF review and must specify their RDATA format, presentation syntax, and wire encoding. The original DNS record types are specified in RFC 1035.

View Full IANA DNS Record Type Registry →

Notable Less-Common Types

TLSA
DANE — binds a TLS certificate to a DNS name
RFC 6698
#52
DNSKEY
DNSSEC public key for a zone
RFC 4034
#48
DS
Delegation Signer — links parent to child DNSSEC key
RFC 4034
#43
RRSIG
DNSSEC signature over an RRset
RFC 4034
#46
NSEC
Authenticated denial of existence
RFC 4034
#47
SSHFP
SSH host key fingerprint for DANE-SSH
RFC 4255
#44
NAPTR
Name Authority Pointer — used in VoIP/ENUM
RFC 3403
#35
HINFO
Host information (CPU and OS type)
RFC 1035
#13
Basics

Anatomy of a DNS Record

Every DNS record follows the same five-field structure defined in RFC 1035. Understanding the fields makes every record type immediately readable.

  • Name — the hostname this record applies to. @ means the zone apex (the domain itself). Relative names are relative to the zone origin.
  • TTL — Time to Live in seconds. How long resolvers cache this record. Omitted in zone files when inheriting the zone $TTL default.
  • Class — almost always IN (Internet). Historically there were others; ignore them in practice.
  • Type — the record type: A, MX, TXT, etc.
  • RDATA — the record-specific data. Format varies by type.
; Name TTL Class Type RDATA ; ────── ───── ───── ──── ──────────────────── @ 3600 IN A 203.0.113.42 www 3600 IN CNAME thedns.guru. @ 3600 IN MX 10 mail.thedns.guru. @ 300 IN TXT "v=spf1 ~all" ; In zone files, $TTL sets a default: $TTL 3600 ; ...then TTL can be omitted: @ IN A 203.0.113.42 ; Trailing dot = fully-qualified domain name (FQDN) ; No trailing dot = relative to zone origin