Category glossary

Resource record glossary

34 definitions associated with Resource record.

Browse the glossary

Browse Resource record definitions

34 matching terms

Page 1 of 2

A record

An Address record maps a domain name to a 32-bit IPv4 address. It is one of the most common DNS data types and is normally used for forward name resolution.

Read definition

CAA record

A Certification Authority Authorization record states which certificate authorities are permitted to issue certificates for a domain and can define incident-reporting contacts. Certificate authorities are expected to check it before issuance.

Read definition

CDNSKEY record

A Child DNSKEY record published by a child to request that the parent create or update a corresponding DS record. It is an alternative signal to CDS for automated delegation maintenance.

Read definition

CDS record

A Child DS record published in a child zone to signal desired DS changes to the parent. It supports automated DNSSEC delegation maintenance when the parent follows a defined acceptance policy.

Read definition

CNAME record

A Canonical Name record makes its owner name an alias for a target name. With limited DNSSEC-related exceptions, other data should not coexist at the same owner name.

Read definition

CSYNC record

A Child-to-Parent Synchronization record allows a child zone to signal selected delegation-data changes, such as NS and related address records, to its parent under an agreed automation policy.

Read definition

DHCID record

A DNS record that stores a digest representing a DHCP client identity and name association. It helps DHCP servers detect ownership conflicts during coordinated dynamic DNS updates.

Read definition

DNAME record

A Delegation Name record redirects an entire subtree of names to another subtree, unlike CNAME which aliases a single owner name. Resolvers synthesize a CNAME-like result for the queried descendant.

Read definition

DNSKEY record

A record containing a public key used to verify DNSSEC signatures made by the corresponding private key. DNSKEYs commonly serve as zone-signing or key-signing keys based on operational role.

Read definition

DS record

A Delegation Signer record in a parent zone contains a digest of a child DNSKEY and identifies the algorithm and digest type. It creates a signed delegation in the chain of trust.

Read definition

DSYNC record

A DNS record used to publish the location of a service that synchronizes delegation-related data between child and parent. It supports automated delegation maintenance workflows.

Read definition

HINFO record

A Host Information record that can describe CPU and operating system text for a host. It is rarely used on the public Internet because the information can become stale or reveal unnecessary detail.

Read definition

HTTPS record

The HTTPS service binding record, a specialized SVCB form for HTTPS endpoints. It can advertise alternative endpoints, protocols, ports, encrypted-client-hello parameters, and address hints.

Read definition

LOC record

A Location record encodes geographic coordinates, altitude, size, and precision for a domain name. It is not widely deployed and should not be relied on as a current asset-location system.

Read definition

MX record

A Mail Exchange record identifies mail servers for a domain and assigns each a preference value. Lower preference values are tried first, with equal values treated as alternatives.

Read definition

NAPTR record

A Naming Authority Pointer record applies ordered rewriting rules to discover services or transform identifiers. It is used in ENUM, SIP, and other naming systems, often together with SRV records.

Read definition

NS record

A Name Server record identifies an authoritative server for a zone or delegated child. Apex authoritative NS records and parent-side delegation NS records are separate RRsets.

Read definition

NSEC record

A DNSSEC record that links to the next existing name in canonical order and lists record types present at its owner. It proves name or type nonexistence but can permit zone walking.

Read definition

NSEC3 record

A hashed denial-of-existence record designed to make straightforward zone enumeration more difficult than NSEC. It adds iterations, salt, and opt-out behavior, with operational and computational tradeoffs.

Read definition

NSEC3PARAM record

A zone-apex record publishing the NSEC3 parameters used to generate hashed owner names, such as algorithm, iterations, and salt. Validators primarily rely on parameters in NSEC3 records themselves.

Read definition

NXNAME record

A DNS record type assigned for compact denial of existence. It is intended to support efficient authenticated nonexistence mechanisms defined by its associated specification.

Read definition