api: YAML JSON TOON Database version: 1.0.0 format: toon dataset: id: 2782 slug: dns-fundamentals title: DNS Fundamentals description: Common DNS record types and their purposes. summary: "The DNS record types that appear in everyday zone files: address records, aliases, mail routing, delegation, text records and zone authority, plus the reverse-lookup, service-location, certificate-authority and DNSSEC types operators meet next. Each row says what the record maps and what it is used for." use_when[2]: "You are configuring or debugging DNS for a domain, mail setup or certificate issuance.",You need to know which record type answers a given question. caveats[2]: Answers depend on the record type queried; a name can have several types at once.,"A CNAME cannot coexist with other record types at the same name, which is why the zone apex needs special handling." related[2]: network-ports-reference,tcp-ip-protocol-suite entry_count: 16 fields[2]{section,field,type,example}: data,type,string,A data,description,string,Maps a hostname to an IPv4 address. category: Networking category_slug: networking tags: "networking,dns,records" view_count: 53 created_at: 1793403093 updated_at: 1793403093 data[16]{type,description}: A,Maps a hostname to an IPv4 address. AAAA,Maps a hostname to an IPv6 address. CNAME,Canonical name alias for another domain. MX,Mail exchange record for email routing. NS,Authoritative name server for the domain. TXT,Arbitrary text often used for verification and SPF. SOA,Start of authority record with zone metadata. PTR,"Maps an IP address back to a hostname, used for reverse DNS." SRV,"Locates a service by naming its host and port, with priority and weight." CAA,Lists the certificate authorities permitted to issue certificates for the domain. DNSKEY,Holds a public key used to verify DNSSEC signatures for the zone. DS,"Delegation Signer: a hash of a child zone's key placed in the parent to chain DNSSEC trust." RRSIG,A DNSSEC signature over a set of records. HTTPS,"Service binding for HTTPS: advertises alternative endpoints and supported protocols such as HTTP/3 (SVCB family)." NAPTR,"Name Authority Pointer: rewrite rules used in telephony number mapping and some service discovery." TLSA,"Associates a TLS certificate or key with a service name, used by DANE."