DNS Record Types Reference
Complete reference for all DNS record types supported by YWT, including purpose, syntax, examples, and common use cases.
DNS Record Types Reference
This page provides a comprehensive reference for every DNS record type you can manage in the YWT DNS manager. For instructions on adding and editing records, see Manage DNS records.
Supported record types at YWT. The YWT DNS manager supports the following record types: A, AAAA, CAA, CNAME, HTTPS, MX, NS, SRV, and TXT. SOA records are managed automatically by YWT and cannot be edited directly.
Record types at a glance
| Type | Purpose | Example value |
|---|---|---|
| A | Maps a hostname to an IPv4 address | 185.199.108.153 |
| AAAA | Maps a hostname to an IPv6 address | 2606:50c0:8000::153 |
| CNAME | Creates an alias to another hostname | target.example.net |
| HTTPS | Publishes HTTPS service binding hints | 1 . alpn=h2 |
| MX | Routes email to a mail server | 10 ASPMX.L.GOOGLE.COM |
| TXT | Stores arbitrary text data | v=spf1 include:_spf.google.com ~all |
| NS | Delegates a zone or subdomain to nameservers | ns1.ywt.ch |
| SRV | Specifies host and port for a service | 10 5 5060 sip.example.com |
| CAA | Restricts which CAs can issue certificates | 0 issue "letsencrypt.org" |
| SOA | Defines zone authority and parameters | (managed automatically) |
A record
Purpose: Maps a hostname to an IPv4 address. This is the most fundamental DNS record type and is how domain names resolve to web servers.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Hostname or subdomain. Use @ for root domain. | @ or www |
| Value | An IPv4 address in dotted-decimal notation. | 185.199.108.153 |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
- Pointing your root domain (
example.ch) to a web server. - Pointing subdomains (
app.example.ch) to specific servers. - Pointing to a load balancer IP address.
Notes:
- You can have multiple A records on the same name for round-robin load distribution.
- A records cannot coexist with CNAME records on the same name.
AAAA record
Purpose: Maps a hostname to an IPv6 address. Functionally identical to an A record but for the IPv6 protocol.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Hostname or subdomain. Use @ for root domain. | @ or www |
| Value | A full or abbreviated IPv6 address. | 2606:50c0:8000::153 |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
- Providing IPv6 connectivity alongside A records for dual-stack hosting.
- Required by some hosting providers (e.g. GitHub Pages) for full connectivity.
Notes:
- AAAA records are optional but recommended if your server supports IPv6.
- Like A records, they cannot coexist with CNAME records on the same name.
CNAME record
Purpose: Creates an alias from one hostname to another. Instead of returning an IP address directly, the resolver follows the CNAME to the target hostname and resolves that instead.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | The subdomain that acts as the alias. | www or blog |
| Value | The canonical hostname to point to. | target.example.net |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
- Pointing
www.example.chto a hosting provider's hostname. - Setting up subdomains for external services (e.g.
shop.example.chto a Shopify domain). - Domain verification for third-party services.
Notes:
- A CNAME record cannot coexist with any other record type on the same name. This is a fundamental DNS restriction. You cannot have a CNAME and an MX record on the same subdomain.
- CNAME records should not be used on the root domain (
@). The root domain typically needs MX, TXT, and other records that conflict with CNAME. - If you enter a CNAME at
@, YWT converts it to an ALIAS-style record internally so it can be resolved at the zone apex.
HTTPS record
Purpose: Publishes HTTPS service binding information for a hostname. HTTPS records can advertise protocol support and alternate endpoints to compatible clients.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Hostname or subdomain. Use @ for root domain. | @ or www |
| Value | HTTPS record content in provider-specific syntax. | 1 . alpn=h2 |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
- Advertising HTTP/2 or HTTP/3 support.
- Service binding for modern hosting providers that request HTTPS records.
Notes:
- HTTPS records are advanced DNS records. Use the exact value provided by the service you are configuring.
MX record
Purpose: Specifies which mail servers should receive email for your domain. MX records include a priority value that determines the order in which servers are tried.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Usually @ for the root domain. | @ |
| Priority | A number indicating preference (lower = higher priority). | 10 |
| Value | The hostname of the mail server. | ASPMX.L.GOOGLE.COM |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
- Routing email to Google Workspace, Microsoft 365, ProtonMail, or any other email provider.
- Setting up primary and backup mail servers with different priorities.
Notes:
- The priority field determines failover order. If the server with priority 10 is unreachable, the sending server tries priority 20, and so on.
- MX record values must be hostnames, not IP addresses.
- You typically need multiple MX records for redundancy. See Email setup for provider-specific configurations.
TXT record
Purpose: Stores arbitrary text data associated with a hostname. TXT records are used extensively for domain verification, email authentication, and security policies.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Hostname or subdomain. Use @ for root domain. | @ or _dmarc |
| Value | A text string (up to 255 characters per string, multiple strings can be concatenated). | v=spf1 include:_spf.google.com ~all |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
| Use case | Example name | Example value |
|---|---|---|
| SPF (email authentication) | @ | v=spf1 include:_spf.google.com ~all |
| DKIM (email signing) | google._domainkey | v=DKIM1; k=rsa; p=MIIBIjAN... |
| DMARC (email policy) | _dmarc | v=DMARC1; p=reject; rua=mailto:dmarc@example.ch |
| Domain verification | @ | google-site-verification=abc123... |
| Domain verification | @ | apple-domain-verification=abc123 |
Notes:
- You can have multiple TXT records on the same name for different purposes.
- You must only have one SPF record per domain. If you need to authorize multiple senders, merge them into a single
v=spf1 ... ~allrecord with multipleinclude:directives. - Long TXT values may need to be split into multiple 255-character strings. The YWT DNS manager handles this automatically.
NS record
Purpose: Delegates authority for a domain or subdomain to specific nameservers. NS records tell DNS resolvers which servers are authoritative for a given zone.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Subdomain to delegate. Root NS records are managed by YWT. | sub |
| Value | The hostname of the nameserver. | ns1.example.com |
| TTL | Cache duration in seconds. | 86400 |
Common use cases:
- Delegating a subdomain (
app.example.ch) to a different DNS provider or hosting platform. - Splitting DNS management across multiple providers.
Notes:
- NS records for the root domain (
@) are managed by the registrar (YWT) and the registry. You cannot edit them in the DNS manager — use the domain settings to change nameservers. - When delegating a subdomain, you typically add two NS records for redundancy.
SRV record
Purpose: Specifies the host and port for a particular service. SRV records enable service discovery by telling clients where to connect for protocols like SIP, XMPP, or LDAP.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Service and protocol prefix, e.g. _sip._tcp | _sip._tcp |
| Priority | Preference value (lower = higher priority). | 10 |
| Weight | Relative weight for records with the same priority. | 5 |
| Port | The TCP or UDP port number. | 5060 |
| Value | The hostname providing the service. | sip.example.com |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
- VoIP / SIP service discovery.
- XMPP (Jabber) chat server configuration.
- Microsoft Teams / Skype for Business federation.
- CalDAV and CardDAV autodiscovery.
Notes:
- SRV records follow a specific naming convention:
_service._protocol.name. For example,_sip._tcp.example.ch. - The weight field is used to distribute load between servers with the same priority. Higher weight means a larger share of traffic.
CAA record
Purpose: Specifies which Certificate Authorities (CAs) are permitted to issue SSL/TLS certificates for your domain. CAA records help prevent unauthorized certificate issuance.
Fields:
| Field | Description | Example |
|---|---|---|
| Name | Hostname. Use @ for root domain. | @ |
| Flags | 0 for non-critical, 128 for critical. | 0 |
| Tag | issue, issuewild, or iodef. | issue |
| Value | The CA's domain name. | "letsencrypt.org" |
| TTL | Cache duration in seconds. | 3600 |
Common use cases:
| Tag | Purpose | Example value |
|---|---|---|
issue | Authorize a CA for standard certificates. | 0 issue "letsencrypt.org" |
issuewild | Authorize a CA for wildcard certificates. | 0 issuewild "letsencrypt.org" |
iodef | Specify a URL or email for violation reports. | 0 iodef "mailto:security@example.ch" |
Notes:
- If no CAA records exist, any CA can issue a certificate for your domain.
- If you use YWT hosting with automatic SSL, make sure your CAA records include
letsencrypt.org(the CA that YWT uses). - You can have multiple CAA records to authorize multiple CAs.
SOA record
Purpose: Defines the start of authority for a DNS zone. The SOA record contains administrative information about the zone, including the primary nameserver, the responsible email address, and timing parameters for zone transfers and caching.
Fields:
| Field | Description |
|---|---|
| Primary nameserver | The main authoritative nameserver for the zone. |
| Responsible email | The email address of the zone administrator (with @ replaced by .). |
| Serial number | A version number that increments with each zone change. |
| Refresh interval | How often secondary nameservers check for updates. |
| Retry interval | How long a secondary waits before retrying a failed refresh. |
| Expire time | How long a secondary serves data without a successful refresh. |
| Minimum TTL | The default TTL for negative caching (NXDOMAIN responses). |
Notes:
- SOA records are managed automatically by YWT. You cannot create, edit, or delete them in the DNS manager.
- Every DNS zone has exactly one SOA record.
- The serial number is updated automatically whenever you make changes to your DNS records.
Quick reference: which record do I need?
| I want to... | Record type | Name | Value |
|---|---|---|---|
| Point my domain to a web server | A | @ | Server IPv4 address |
| Point my domain to a web server (IPv6) | AAAA | @ | Server IPv6 address |
Point www to a hosting provider | CNAME | www | Provider hostname |
| Receive email | MX | @ | Mail server hostname |
| Set up SPF for email | TXT | @ | v=spf1 include:... ~all |
| Set up DKIM for email | TXT or CNAME | selector._domainkey | Provider-specific value |
| Set up DMARC for email | TXT | _dmarc | v=DMARC1; p=... |
| Verify domain ownership | TXT | @ | Verification string |
| Restrict SSL certificate issuance | CAA | @ | 0 issue "ca.example.com" |
| Delegate a subdomain | NS | sub | Nameserver hostname |
For practical examples of common configurations, see Common DNS setups and the Guides section.