Skip to main content
Stackryze supports every standard DNS record type plus the modern ones (SVCB, HTTPS, TLSA) the rest of the industry is still catching up to.

​
Classic records

Map a name to an IPv4 (A) or IPv6 (AAAA) address.
example.com.       3600  IN  A     192.0.2.1
api.example.com.   300   IN  AAAA  2001:db8::1
Alias one name to another. CNAME is for the leftmost label; DNAME redirects the whole subtree.
www.example.com.  3600  IN  CNAME  example.com.
Mail exchange. Always pair with an SPF (TXT) record and sign with DKIM.
example.com.  3600  IN  MX  10  mail.example.com.
Free-form text. Used for SPF, DKIM, DMARC, domain verification, and DNS-based ACME challenges.
example.com.  3600  IN  TXT  "v=spf1 include:_spf.stackryze.com ~all"
_dmarc.example.com. 3600 IN TXT "v=DMARC1; p=reject; rua=mailto:dmarc@example.com"
Delegation. You almost never edit this by hand — Stackryze manages it for you.
Service locator. Used for XMPP, SIP, Minecraft, Matrix, etc.
_minecraft._tcp.example.com. 3600 IN SRV 0 5 25565 mc.example.com.
Restrict which CAs may issue certificates for your domain.
example.com.  3600  IN  CAA  0 issue "letsencrypt.org"

​
Modern records

Service bindings — the modern way to tell clients how to connect to your origin. Stackryze has full RFC 9460 + 9461 support including alpn, port, ech, ipv4hint, and ipv6hint.
example.com.  300  IN  HTTPS  1 . alpn="h2,h3" port=443 ipv4hint=192.0.2.1 ech="..."
DANE TLS association. Pin a CA, a leaf, or a certificate hash for a service.
_443._tcp.example.com. 3600 IN TLSA 3 1 1 abc123...
Publish an OpenPGP key in DNS, so anyone can email you encrypted without a keyserver.

​
Editing records

You can edit records from:
  1. The dashboard — click any record to inline-edit
  2. The API — see API quickstart
  3. The CLI — stackryze records set --zone example.com ... (preview)