Skip to main content
Home DNS record

DNS record

What are DNS records?

A DNS record is a database entry stored in DNS servers with information on specific domains, such as their IP addresses or instructions on how to handle related DNS queries. DNS records are essential for translating human-friendly URLs to connection instructions for the user’s devices.

Devices store DNS records retrieved from DNS servers in their cache to avoid repeat DNS requests. Over time, this poses security and privacy risks — anyone with access to your DNS cache can see your online activity or redirect you to dangerous websites (DNS spoofing). For this reason, it is important to regularly flush your DNS cache.

See also: DNS A record, DNS AAAA record, DNS CNAME record, DNS MX record, DNS NS record, DNS PTR record, DNS SOA record, DNS SPF record, DNS SRV record, DNS TXT record

The most common types of DNS records

  • A: the IPv4 address of a given domain
  • AAAA: the IPv6 address of a given domain
  • CNAME: instructions to forward one domain to another domain
  • MX: instructions to forward mail to the email server
  • NS: the name server for a DNS entry
  • SOA: the authoritative information about the zone, including the primary name server and email contact
  • SRV: instructions to let a specific device use a particular port
  • PTR: the domain name (for reverse lookups)
  • TXT: instructions to include arbitrary text for purposes like domain verification or security

Less common types of DNS records

  • AFSDB: the location of AFS file servers
  • APL: address prefix lists for IP addresses
  • CAA: certificate authority authorization
  • DNSKEY: public key for DNSSEC
  • CERT: certificate and associated information
  • DHCID: DHCP configuration information
  • DNAME: domain name redirection
  • HIP: Host Identity Protocol information
  • IPSECKEY: public key for IPsec
  • LOC: geographical location information
  • NAPTR: naming authority and service discovery
  • NSEC: proof of non-existence of DNS records
  • RRSIG: DNSSEC signature for record verification
  • RP: responsible person for the domain
  • SSHFP: SSH public key fingerprints