DNS record types

Maps the domain to an IPv4 address.

Maps the domain to an IPv6 address.

Certificate authorities allowed to issue TLS certificates for the domain.

Alias that points to another domain name instead of an IP.

Public key used by DNSSEC to sign the zone's records.

Links the zone to the parent zone's DNSSEC key (signed delegation).

Host information: CPU and operating system; rarely used today.

Connection parameters (ALPN, port, IP) to speed up HTTPS access.

The domain's mail server, with a priority (the lower number takes precedence).

Rewrite rules for service discovery (used in ENUM and SIP).

Authoritative name servers that manage the domain's zone.

Reverse DNS: maps an IP address to a domain name.

Zone authority data: primary server, contact, and refresh timers.

Location (host and port) of a service, such as SIP or XMPP.

Host's SSH public key fingerprint used to verify connections.

Generic service binding record; it is the basis of the HTTPS record.

Associates a TLS certificate with the domain via DANE.

Free-form text; used for SPF, DKIM, DMARC, and ownership verification.