Record Set Types and Configuration Rules

Record set types for public zones include A, CNAME, MX, AAAA, TXT, SRV, NS, SOA, and CAA. For details, see Table 1.

**Table 1** Record set types and configuration rules
Record Set Type	Description	Rule	Example
A	Maps domains to IPv4 addresses. It is usually used to map domain names used by websites to IPv4 addresses.	Enter IPv4 addresses mapped to the domain name. You can enter up to 50 different IP addresses, each on a separate line.	1.1.xx.xx 1.2.xx.xx
CNAME	Maps one domain name to another or multiple domain names to one.	Enter the mapped domain name. You can enter only one domain name.	www.example.com
MX	Maps domain names to email servers.	Enter email server addresses. You can enter up to 50 different addresses, each on a separate line. The format is [priority][mail-server-address]. Configuration rules: priority: The priority for an email server to receive emails. A smaller value indicates a higher priority. mail server hostname: The mail server address provided by your email provider	10 mailserver.example.com. 20 mailserver2.example.com.
AAAA	Maps domain names to IPv6 addresses.	Enter IPv6 addresses mapped to the domain name. You can enter up to 50 different IP addresses, each on a separate line.	ff03:0db8:85a3:0:0:8a2e:0370:7334
TXT	Creates text records for domain names. It is usually used in the following scenarios: Record DKIM public keys to prevent email fraud. Record the identity of domain name owners to facilitate domain name retrieval.	Enter text content as required. Configuration rules: Text record values must be enclosed in double quotation marks. One or more text record values are supported, each on a separate line. A maximum of 50 text record values can be entered. A single text record value can contain multiple character strings, each of which is double quoted and separated from others using a space. One character string cannot exceed 255 characters. A value must not exceed 4,096 characters. The value cannot be left blank. The text cannot contain a backslash (\).	Single text record: "aaa" Multiple text records: "bbb" "ccc" A text record that contains multiple strings: "ddd" "eee" "fff" Text record in SPF format: "v=spf1 a mx -all" This value indicates that only IP addresses in the A and MX record sets are allowed to send emails using this domain name.
SRV	Records servers providing specific services.	Enter the specific server address. You can enter up to 50 different addresses, each on a separate line. The value format is [priority] [weight] [port number] [server address]. Configuration rules: The priority, weight, and port number range from 0 to 65535. A smaller value indicates a higher priority. A larger value indicates a larger weight. The host name is the domain name of the target server. Ensure that the domain name can be resolved. NOTE: If the record set values have the same priority, requests to the domain name will be routed based on weights. A server with a higher weight will be chosen more often.	2 1 2355 example_server.test.com
NS	Delegates subdomains to other name servers. After a public zone is created, an NS record set is automatically created for this zone and cannot be deleted. You can add NS record sets only in the following scenarios: The Name parameter is not left blank. This means that you can add NS record sets for subdomains of a domain name. The value of the Line parameter is not set to Default. This means that you can add NS record sets for the domain name with other resolution lines.	Enter the DNS server address. You can enter up to 50 different addresses, each on a separate line.	ns1.example.com ns2.example.com
SOA	Identifies the base information about a domain name. The SOA record set is automatically generated by the DNS service and cannot be added manually.	This type of record set is created by default and cannot be added manually.	This type of record set is created by default and cannot be added manually.
CAA	Grants certificate issuing permissions to certificate authorities (CAs). CAA record sets can prevent the issuance of unauthorized HTTPS certificates.	CA to be authorized to issue certificates for a domain name or its subdomains. You can enter up to 50 different records, each on a separate line. The format is [flag] [tag] [value]. Configuration rules: flag: CA identifier, an unsigned character ranging from 0 to 255. Usually, the value is set to 0. tag: You can enter 1 to 15 characters. Only letters and digits from 0 to 9 are allowed. The tag can be one of the following: issue: authorizes a CA to issue all types of certificates. issuewild: authorizes a CA to issue wildcard certificates. iodef: requests notifications once a CA receives invalid certificate requests. value: authorized CA or email address/URL required for notification once the CA receives invalid certificate requests. The value depends on the value of tag and must be enclosed in quotation marks (""). The value can contain a maximum of 255 characters. Only letters, digits, spaces, and the following special characters are allowed: -#*?&_~=:;.@+^/!%	0 issue "ca.abc.com" 0 issuewild "ca.def.com" 0 iodef "mailto:admin@domain.com" 0 iodef "http://domain.com/log/"

Wildcard Resolution Rules

DNS allows you to add a record set with the record set name set to an asterisk (*), for example, *.example.com. This can map all subdomains to the same value.

If you have added a wildcard record set for a domain name and added multiple record sets of the same type but different line for a specific subdomain, the DNS resolution complies with the following rules:

Priority: Line match has a higher priority than domain name match. During a DNS query, the system first checks whether a query matches a specific line (such as China Unicom, China Telecom, or China Mobile). If no result is found, the system matches the domain name.
Priority of queries in the same line: If the line type is the same, exact match has a higher priority than fuzzy match.
Priority for interaction between intelligent resolution and default lines: Wildcard domain name query matches the intelligent line, and exact domain name query matches the default line. If both of them are matched, the exact domain name query result is used.

Take example.com as an example.

Configure wildcard records and a record for the subdomain starting with www.

The following table lists the parameter settings.

Subdomain	Line	Record Set Type	Value
www.example.com	Default	A	4.4.xx.xx
*.example.com	Default line for China Telecom	A	1.1.xx.xx
*.example.com	Default line for China Unicom	A	2.2.xx.xx
*.example.com	Default line for China Mobile	A	3.3.xx.xx

When a visitor is a China Telecom, China Unicom, or China Mobile user, 4.4.xx.xx is returned.

Rule: If both wildcard and exact domain name queries are matched, the exact domain name query result is used.

Configure intelligent resolution for the subdomain www.example.com.

Subdomain	Line	Record Set Type	Value
www.example.com	Default	A	4.4.xx.xx
*.example.com	Default line for China Telecom	A	1.1.xx.xx
www.example.com	Default line for China Telecom	A	1.1.xx.xx
*.example.com	Default line for China Unicom	A	2.2.xx.xx
www.example.com	Default line for China Unicom	A	2.2.xx.xx
*.example.com	Default line for China Mobile	A	3.3.xx.xx
www.example.com	Default line for China Mobile	A	3.3.xx.xx

When visitors are China Telecom, China Unicom, or China Mobile users and they are accessing www.example.com, 1.1.xx.xx is returned for the China Telecom user, 2.2.xx.xx is returned for the China Unicom user, and 3.3.xx.xx is returned for the China Mobile user.

Rule: Line match has a higher priority than domain name match. If the line type is the same, exact match has a higher priority than fuzzy match.

Record Set Application Example

Record sets are used in the following scenarios:

Routing Internet traffic to a website
A and AAAA record sets are usually used to map domain names used by websites to IPv4 or IPv6 addresses of web servers where the websites are deployed.

Figure 1 Accessing a website over the Internet using domain name
Private domain name resolution
On a private network, A and AAAA record sets translate private domain names into private IP addresses.

Figure 2 Private domain name resolution
Email domain name resolution
MX, CNAME, and TXT record sets are usually used for email services.

Figure 3 Email domain name resolution
Reverse resolution on a private network
PTR records translate private IP addresses into private domain names.

Figure 4 Reverse resolution on a private network