DNS records overview

Address record, which maps host names to their IPv4 address.

IPv6 address record, which maps host names to their IPv6 address.

Alias record (Preview), which maps an alias domain name to a canonical name at the zone apex. An alias record is also called an ANAME record or CNAME flattening.

You can configure alias records by using the gcloud CLI or the Cloud DNS API. You cannot configure alias records by using the Trusted Cloud console.

Certificate Authority (CA) Authorization, which specifies which CAs are allowed to create certificates for a domain.

Canonical name record, which specifies alias names.

If you encounter issues while creating a CNAME record, see CNAME record defined in a private zone not working.

The DNSSEC key from another operator for secure transfer. This record set type can only be added to a DNSSEC-enabled zone in Transfer state.

The DNSSEC key fingerprint for a secure delegated zone. This record set type does not activate DNSSEC for a delegated zone unless you enable (and activate) DNSSEC for this zone.

HTTPS Service Binding record, which allows an origin to indicate multiple alternative endpoints, each with associated parameters. This record also redirects HTTP to HTTPS. This record type is based on the more general SVCB record type and uses the same value format.

IPsec tunnel gateway data and public keys for IPsec-capable clients to enable opportunistic encryption.

Mail exchange record, which routes requests to mail servers.

Name server record, which delegates a DNS zone to an authoritative server.

Start of authority record, which specifies authoritative information about a DNS zone. An SOA resource record is created for you when you create your managed zone. You can modify the record as needed (for example, you can change the serial number to an arbitrary number to support date-based versioning).

Sender Policy Framework record, a deprecated record type formerly used in email validation systems (use a TXT record instead).

Service locator record, which is used by some voice over IP (VoIP), instant messaging protocols, and other applications.

SSH fingerprint for SSH clients to validate the public keys of SSH servers.

Service Binding record, which allows a logical service to indicate multiple alternative endpoints, each with associated parameters. For HTTPS origins, see the HTTPS record type.

TLS authentication record for TLS clients to validate X.509 server certificates.

Text record, which can contain arbitrary text and can also be used to define machine-readable data, such as security or abuse prevention information.

A TXT record can contain one or more text strings; the maximum length of each individual string is 255 characters. Mail agents and other software agents concatenate multiple strings. Enclose each string in quotation marks.