DNS Resource Records/Entries (DNS RR)
- are entries are stored in a DNS Server (DNS Resolver - Root Server - Top-Level Server - Authoritative Server)
DNS RR Entry - Components
a DNS RR entry contains the following components:
- name = domain or sub-domain (e.g. marcuschiu.com. or confluence.marcuschiu.com.)
- value = (e.g. 3.95.18.164 or example.com)
- type = DNS RR Type (e.g. A, CNAME, TXT, etc)
- ttl = time-to-live in seconds (e.g. 300)
DNS RR Types
|
DNS Record Type |
Description |
RR Name |
RR Value |
|---|---|---|---|
|
A (Host address - Address Mapping record - DNS Host Record) |
stores a hostname and its corresponding IPv4 address |
hostname |
IPv4 address |
|
AAAA (IPv6 host address) |
stores a hostname and its corresponding IPv6 address |
hostname |
IPv6 address |
|
ALIAS (Auto resolved alias) |
are virtual alias records resolved by Simple DNS Plus at at the time of each request - providing “flattened” (no CNAME-record chain) synthesized records with data from a hidden source name | ||
|
CNAME (Canonical name for an alias) |
can be used to alias a hostname to another hostname. When a DNS client requests a record that contains a CNAME, which points to another hostname, the DNS resolution process is repeated with the new hostname |
alias name e.g. www.ibm.com |
canonical name |
|
MX (Mail eXchange) |
|
domain e.g. google.com |
hostname of mail server of domain e.g. aspmx.l.google.com. |
|
NS (Name Server) |
specifies that a DNS Zone, such as “example.com” is delegated to a specific Authoritative Name Server, and provides the address of the name server |
e.g. foo.com |
hostname of authoritative name server for the domain name |
|
PTR (Reverse-Lookup Pointer) |
allows a DNS resolver to provide an IP address and receive a hostname (reverse DNS lookup) | ||
|
SOA (Start Of Authority) |
this record appears at the beginning of a DNS zone file, and indicates the Authoritative Name Server for the current DNS zone, contact details for the domain administrator, domain serial number, and information on how frequently DNS information for this zone should be refreshed | ||
|
SRV (Service Location - location of service) |
a service location record, like MX but for other communication protocols | ||
|
TXT (Descriptive text) |
typically carries machine-readable data such as opportunistic encryption, sender policy framework, DKIM, DMARC, etc. | ||
|
CERT (Certificate) |
stores encryption certificates—PKIX, SPKI, PGP, and so on |
DNS Records Types Used For DNSSEC
|
Record Type |
Description |
|---|---|
|
DNSKEY (DNSSEC public key) | |
|
DS (Delegation Signer) | |
|
NSEC (Next Secure) | |
|
NSEC3 (Next Secure v. 3) | |
|
NSEC3PARAM (NSEC3 Parameters) | |
|
RRSIG (RRset Signature) |