Skip to main content

Overview

Xloud DNS supports all standard DNS record types. Each record type serves a specific purpose in the DNS hierarchy. This reference covers the supported types, their value format, and common usage examples.
Record values must be formatted exactly according to DNS standards. Trailing dots are required for all values that are fully qualified domain names (FQDNs).

Quick Reference

Record TypePurposeTTL Recommendation
AMaps hostname to IPv4 address3600 (standard), 300 (pre-migration)
AAAAMaps hostname to IPv6 address3600
CNAMEHostname alias3600
MXMail exchange3600
TXTArbitrary text (SPF, DKIM, domain verification)3600
NSDelegates a subdomain86400
SRVService location3600
PTRReverse DNS (IP to hostname)3600
CAACertificate Authority Authorization86400
SOAZone authority (auto-managed)

Record Type Details

A — IPv4 Address Record

Maps a hostname to one or more IPv4 addresses. The most common record type for pointing hostnames to servers.Value format: IPv4 address (192.168.1.10)Multiple values: Add multiple --record flags for round-robin load distribution.
Create A record
openstack recordset create \
  --type A \
  --record 192.168.1.10 \
  --record 192.168.1.11 \
  --ttl 3600 \
  example.com. www
Multiple A records for the same name create DNS round-robin distribution — each resolver query cycles through the values. This is not a replacement for a proper load balancer but useful for simple traffic spreading.
Maps a hostname to an IPv6 address. Format is identical to A records but uses IPv6 notation.Value format: Full or abbreviated IPv6 address (2001:db8::1)
Create AAAA record
openstack recordset create \
  --type AAAA \
  --record 2001:db8::1 \
  --ttl 3600 \
  example.com. www
Creates an alias that points one hostname to another. The target (right-hand side) must resolve to an A or AAAA record.Value format: Fully qualified domain name with trailing dot (app.example.com.)
Create CNAME record
openstack recordset create \
  --type CNAME \
  --record app.example.com. \
  example.com. api
CNAME records cannot coexist with other record types at the same name, and cannot be created at the zone apex (@). Use an A record for the root domain hostname.
Specifies the mail server responsible for receiving email for the domain. Multiple MX records can be defined with different priorities.Value format: <priority> <hostname>. (e.g., 10 mail.example.com.)Lower priority numbers have higher precedence. If the primary fails, resolvers try the next lowest priority.
Create MX records with primary and backup
openstack recordset create \
  --type MX \
  --record "10 mail.example.com." \
  --record "20 mail-backup.example.com." \
  example.com. @
Stores arbitrary text. Widely used for domain ownership verification, SPF (Sender Policy Framework), DKIM keys, and DMARC policies.Value format: Quoted string ("v=spf1 include:_spf.example.com ~all")
Create SPF record
openstack recordset create \
  --type TXT \
  --record '"v=spf1 include:_spf.example.com ~all"' \
  example.com. @
Create DKIM record
openstack recordset create \
  --type TXT \
  --record '"v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3..."' \
  example.com. mail._domainkey
Delegates a subdomain to a different set of nameservers. The zone apex NS records are auto-managed by the DNS service — do not modify them manually.Value format: Fully qualified nameserver hostname with trailing dot
Delegate a subdomain
openstack recordset create \
  --type NS \
  --record "ns1.partner.com." \
  --record "ns2.partner.com." \
  example.com. sub
Specifies the host and port for a specific service. Used by SIP, XMPP, and other service-discovery protocols.Value format: <priority> <weight> <port> <target>.
Create SIP SRV record
openstack recordset create \
  --type SRV \
  --record "10 20 5060 sip.example.com." \
  example.com. _sip._tcp
Maps an IP address back to a hostname. PTR records live in reverse zones (in-addr.arpa. for IPv4, ip6.arpa. for IPv6). The DNS service manages PTR records through the Reverse DNS interface — see Reverse DNS for the workflow.
Restricts which Certificate Authorities can issue TLS certificates for the domain. Supported by major CAs to prevent unauthorized certificate issuance.Value format: <flags> <tag> "<value>"
Allow only Let's Encrypt to issue certificates
openstack recordset create \
  --type CAA \
  --record '0 issue "letsencrypt.org"' \
  example.com. @

Next Steps

Manage Records

Create, update, and delete record sets using the Dashboard and CLI

Reverse DNS

Configure PTR records for your zone’s IP addresses

Create a Zone

Provision a new authoritative DNS zone

Troubleshooting

Resolve record conflicts and propagation issues