Enregistrements DNS

Recherchez et apprenez les types d'enregistrements DNS — exemples, utilisation, références RFC

Référence des types d'enregistrements DNS. Chaque entrée comporte une description, un exemple de syntaxe de fichier de zone et des notes sur quand l'utiliser.

Rechercher

14 types d'enregistrements

Address (IPv4)RFC 1035

Maps a hostname to a 32-bit IPv4 address.

Exemple

example.com.    300    IN  A    93.184.216.34

Quand l'utiliser

Standard hostname → IPv4 mapping. Most websites have at least one A record.

AAAA

Address (IPv6)RFC 3596

Maps a hostname to a 128-bit IPv6 address.

Exemple

example.com.    300    IN  AAAA  2606:2800:220:1:248:1893:25c8:1946

Quand l'utiliser

IPv6 endpoint resolution. Modern dual-stack deployments include both A and AAAA.

CNAME

Canonical NameRFC 1035

Alias of one hostname to another. The DNS lookup follows the alias.

Exemple

www.example.com.   300   IN  CNAME  example.com.

Quand l'utiliser

Pointing subdomains (www, app) to a primary host. Cannot coexist with other records on the same name.

Mail ExchangeRFC 1035

Specifies mail servers for a domain, with a priority value.

Exemple

example.com.    300    IN  MX    10 mail.example.com.

Quand l'utiliser

Required for receiving email. Lower priority = higher preference.

TXT

TexteRFC 1035

Arbitrary text strings. Used for verification and policy declarations.

Exemple

example.com.    300    IN  TXT   "v=spf1 include:_spf.google.com ~all"

Quand l'utiliser

SPF/DKIM/DMARC email auth, domain verification (Google/Facebook), public keys.

Name ServerRFC 1035

Delegates a DNS zone to authoritative name servers.

Exemple

example.com.    300    IN  NS    ns1.example.com.

Quand l'utiliser

Required at the apex of every zone. Lists which servers answer queries for this domain.

SOA

Start of AuthorityRFC 1035

Authoritative info about the zone: primary NS, admin email, serial, timers.

Exemple

example.com.   3600   IN  SOA   ns1.example.com. admin.example.com. 2026050701 7200 3600 1209600 3600

Quand l'utiliser

Exactly one per zone, at the apex. Required by DNS spec.

SRV

Service LocatorRFC 2782

Specifies the host/port for a service — protocol, weight, priority.

Exemple

_sip._tcp.example.com. 300 IN SRV 10 60 5060 sipserver.example.com.

Quand l'utiliser

SIP/XMPP/LDAP/Minecraft service discovery. Format: _service._proto.name.

CAA

Certification Authority AuthorizationRFC 8659

Restricts which CAs can issue TLS certificates for the domain.

Exemple

example.com.   300    IN  CAA   0 issue "letsencrypt.org"

Quand l'utiliser

Prevent unauthorized CAs from issuing certs for your domain. Recommended for security.

PTR

Pointer (Reverse DNS)RFC 1035

Maps an IP address back to a hostname (in in-addr.arpa or ip6.arpa).

Exemple

34.216.184.93.in-addr.arpa.  300  IN  PTR  example.com.

Quand l'utiliser

Reverse DNS for email server reputation (spam filters), logging.

HTTPS

HTTPS Service BindingRFC 9460

Encrypted ALPN/SNI hints for HTTPS connections; supports ECH.

Exemple

example.com.   300    IN  HTTPS  1 . alpn="h3,h2"

Quand l'utiliser

Modern HTTPS optimization (HTTP/3 hint, encrypted client hello). Browser support growing.

SVCB

Service BindingRFC 9460

Generic service binding (HTTPS is a specific subtype).

Exemple

_dns.example.com. 300 IN SVCB 1 dns.example.com. alpn="dot"

Quand l'utiliser

Generic service alias with hints (e.g., DNS over TLS). Less common than HTTPS.

Delegation SignerRFC 4034

DNSSEC — fingerprint of child zone's KSK, stored in parent zone.

Exemple

example.com. 86400 IN DS 12345 13 2 ABC123...

Quand l'utiliser

DNSSEC chain of trust. Required when a zone is DNSSEC-signed.

DNSKEY

DNS Public KeyRFC 4034

DNSSEC — public key for verifying signatures in the zone.

Exemple

example.com. 86400 IN DNSKEY 257 3 13 ABC456...

Quand l'utiliser

DNSSEC verification. Stored at zone apex; signed by KSK referenced by parent's DS.

Comment utiliser

Tapez un type d'enregistrement, un mot-clé ou un cas d'usage dans le champ de recherche (p. ex. "MX", "mail", "DNSSEC").
Examinez les cartes correspondantes, chacune affichant le badge de type d'enregistrement, le nom complet, la référence RFC, la description, un exemple concret et quand l'utiliser.
Laissez le champ vide pour voir les 14 types d'enregistrement à la fois.

Exemples

Chercher "MX" affiche l'enregistrement d'échangeur de courrier, RFC 1035, avec l'exemple "example.com. IN MX 10 mail.example.com." et explique qu'il est utilisé pour acheminer le courrier d'un domaine.
Chercher "DNSSEC" retourne les cartes DS et RRSIG expliquant comment les réponses DNS sont signées cryptographiquement.

Vérifiez les sorties avant utilisation en production. Aucune garantie — voir Conditions.