Types of DNS Records: A Complete Guide
The Domain Name System uses many different record types, each designed for a specific purpose. From routing web traffic and email to securing your domain with DNSSEC, understanding these record types is essential for managing your DNS infrastructure effectively.
Common DNS Records
These are the DNS record types you'll encounter most frequently when managing domains.
- A Record
- Maps a domain name to an IPv4 address. The most fundamental DNS record type, used to point your domain to a web server.
- AAAA Record
- Maps a domain name to an IPv6 address. The IPv6 equivalent of an A record, increasingly important as IPv6 adoption grows.
- CNAME Record
- Creates an alias that points one domain name to another canonical domain name. Commonly used for subdomains like www.
- MX Record
- Specifies the mail servers responsible for receiving email for a domain, with priority values to determine delivery order.
- TXT Record
- Stores arbitrary text data, commonly used for domain verification, SPF email authentication, DKIM signatures, and DMARC policies.
- NS Record
- Delegates a DNS zone to the specified authoritative name servers. Essential for DNS hierarchy and domain delegation.
- SOA Record
- The Start of Authority record contains administrative information about a DNS zone, including the primary nameserver, admin email, and zone transfer timers.
- PTR Record
- Maps an IP address back to a domain name (reverse DNS). Critical for email server verification and network diagnostics.
- SRV Record
- Defines the hostname and port number for specific network services like VoIP, LDAP, and XMPP.
Security & Authentication Records
These record types help secure your domain, validate certificates, and authenticate services.
- CAA Record
- Specifies which Certificate Authorities are authorized to issue SSL/TLS certificates for your domain.
- SPF Record
- Identifies which mail servers are authorized to send email on behalf of your domain, helping prevent email spoofing.
- DNSKEY Record
- Stores cryptographic public keys used in DNSSEC to verify the authenticity of DNS responses.
- DS Record
- The Delegation Signer record establishes a chain of trust in DNSSEC between parent and child zones.
- RRSIG Record
- Contains digital signatures for DNSSEC-protected DNS records, allowing resolvers to verify data integrity.
- SSHFP Record
- Stores SSH server key fingerprints in DNS, allowing clients to verify server identity before connecting.
- TLSA Record
- Enables DANE (DNS-based Authentication of Named Entities) for TLS certificate pinning via DNS.
- SMIMEA Record
- Associates S/MIME certificates with email addresses for encrypted and signed email communication.
- CERT Record
- Stores public key certificates in DNS for authentication and encryption purposes.
- CDNSKEY Record
- Enables automated DNSSEC key rollovers between child and parent zones.
- CDS Record
- The Child DS record automates DNSSEC bootstrapping and key rollovers in child zones.
Service Discovery & Routing Records
Records that enable advanced service discovery, connection optimization, and content routing.
- HTTPS Record
- Advertises HTTPS service parameters via DNS, improving connection performance by reducing round trips.
- SVCB Record
- The Service Binding record enables generic service discovery and connection optimization in DNS.
- NAPTR Record
- Rewrites domain names using regex rules for VoIP, ENUM, and other service discovery protocols.
- URI Record
- Associates URIs with domain names for service discovery, with priority and weight for load balancing.
Alias & Redirection Records
Records used for domain aliasing, redirection, and URL forwarding.
- ALIAS Record
- Functions like a CNAME but can be used at the zone apex. A provider-specific record not defined in standard DNS RFCs.
- ANAME Record
- Another zone apex alias record type, similar to ALIAS, supported by certain DNS providers.
- DNAME Record
- Redirects an entire subtree of the domain name tree to another domain, unlike CNAME which only aliases a single name.
- URL Record
- A provider-specific record that enables URL forwarding and redirection at the DNS level.
- URLFWD Record
- A URL forwarding record that redirects visitors to a different URL, with configurable redirect types.
- HTTPRED Record
- Performs HTTP redirects at the DNS level, allowing domain forwarding without a web server.
- FRAME Record
- Enables URL forwarding with frame masking, displaying content from another URL while keeping the original domain in the browser.
Specialty & Informational Records
Less common record types used for specific purposes like zone synchronization, host information, and geographic data.
- CSYNC Record
- Automates synchronization of NS and glue records between child and parent DNS zones.
- DHCID Record
- Prevents conflicts in dynamic DNS updates by identifying which DHCP client owns a particular DNS record.
- HINFO Record
- Describes the hardware and operating system of a host. Rarely used in modern DNS due to security concerns.
- LOC Record
- Stores geographic location data (latitude, longitude, altitude) for a domain name.
- RP Record
- Identifies the responsible person for a domain, providing contact information via DNS.
- MXE Record
- A simplified mail exchange record that points directly to an IP address instead of a hostname.
Monitor All Your DNS Records
ZoneWatcher supports monitoring for all of these DNS record types. When any record changes, you'll receive instant notifications so you can verify the change was intentional and correct.
Learn about DNS record monitoring or try our free DNS lookup tool to check your current records.