DNS Reference
Quick reference for DNS record types — A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, PTR, CAA — with format and TTL guidance.
Maps a hostname to an IPv4 address.
<hostname> <ttl> IN A <ipv4-address>
example.com. 300 IN A 93.184.216.34
300–3600s for most records; lower for frequently changing IPs.
Maps a hostname to an IPv6 address.
<hostname> <ttl> IN AAAA <ipv6-address>
example.com. 300 IN AAAA 2606:2800:220:1:248:1893:25c8:1946
300–3600s, same as A records.
Aliases one name to another (the canonical name).
<alias> <ttl> IN CNAME <canonical-name>
www.example.com. 300 IN CNAME example.com.
300–3600s; shorter TTL improves failover speed.
Specifies mail servers responsible for receiving email for the domain.
<domain> <ttl> IN MX <priority> <mail-server>
example.com. 3600 IN MX 10 mail.example.com.
3600s or higher; mail servers change rarely.
Stores arbitrary text data; used for SPF, DKIM, DMARC, and domain verification.
<domain> <ttl> IN TXT "<text-string>"
example.com. 3600 IN TXT "v=spf1 include:_spf.google.com ~all"
3600s for SPF/DKIM; shorter for frequently updated verification tokens.
Delegates a DNS zone to use the given authoritative name servers.
<domain> <ttl> IN NS <nameserver>
example.com. 86400 IN NS ns1.example.com.
86400s (24h) or higher; name servers change infrequently.
Provides authoritative information about a DNS zone including primary name server and contact email.
<domain> <ttl> IN SOA <primary-ns> <admin-email> <serial> <refresh> <retry> <expire> <minimum>
example.com. 86400 IN SOA ns1.example.com. admin.example.com. 2024010101 3600 900 604800 300
86400s; changes only when zone configuration changes.
Specifies the location (hostname and port) of servers for specific services.
_<service>._<proto>.<domain> <ttl> IN SRV <priority> <weight> <port> <target>
_sip._tcp.example.com. 3600 IN SRV 10 20 5060 sipserver.example.com.
3600s; adjust lower if service endpoints change frequently.
Maps an IP address to a hostname (reverse DNS lookup).
<reversed-ip>.in-addr.arpa. <ttl> IN PTR <hostname>
34.216.184.93.in-addr.arpa. 300 IN PTR example.com.
300–3600s; set by the IP address owner (usually hosting provider).
Specifies which certificate authorities (CAs) are allowed to issue SSL/TLS certificates for the domain.
<domain> <ttl> IN CAA <flags> <tag> "<value>"
example.com. 3600 IN CAA 0 issue "letsencrypt.org"
3600–86400s; changes only when switching certificate authorities.