DNS Record Types Reference
A complete reference for DNS resource record types — A, AAAA, CNAME, MX, TXT, and every other record type you'll run into managing DNS.
Maps a hostname to an IPv4 address.
Maps a hostname to an IPv6 address.
Restricts which certificate authorities are allowed to issue TLS certificates for a domain.
Stores a certificate or certificate-related data directly in DNS.
Aliases one hostname to another hostname.
Redirects an entire subtree of the DNS namespace to another subtree, unlike CNAME which only aliases a single name.
Publishes the public key used to verify DNSSEC signatures for a zone.
Published in a parent zone to link the DNSSEC chain of trust down to a child zone's key.
A legacy record type for publishing a host's CPU and operating system type — rarely used today for its original purpose.
The web-specific version of SVCB — tells browsers how to connect efficiently, including HTTP/3 support and connection hints.
Publishes a host's physical geographic location — latitude, longitude, and altitude — directly in DNS.
Specifies the mail servers responsible for accepting email for a domain.
Rewrites a name into another name or URI using regex-based rules, commonly used in SIP and ENUM telephony systems.
Delegates a domain or subdomain to a set of authoritative nameservers.
Proves a name doesn't exist in a DNSSEC-signed zone by pointing to the next name in canonical order.
Proves a name doesn't exist in a DNSSEC-signed zone using hashed names, preventing easy zone enumeration.
Publishes the hashing parameters (algorithm, iterations, salt) a zone uses for its NSEC3 records.
Maps an IP address back to a hostname — the reverse of an A/AAAA lookup.
Carries the cryptographic signature that proves a DNSSEC-signed record set is authentic.
Holds administrative metadata about a DNS zone — primary nameserver, admin contact, serial number, and timing values.
A deprecated standalone record type for SPF data — modern SPF is published as a TXT record instead.
Specifies the hostname, port, priority, and weight for a specific service running on a domain.
Publishes a fingerprint of an SSH host key in DNS, letting clients verify a server's identity automatically.
A modern, general-purpose record for publishing how to reach a service, including connection parameters like ALPN and ports.
Binds a TLS certificate or public key to a hostname and port, enabling DANE certificate validation.
Stores arbitrary text data, most commonly used for domain verification and email authentication (SPF, DKIM, DMARC).