isitdns? wiki/Records/A: IPv4 address record
Records

A: IPv4 address record

One record → one IPv4 address (RFC 1035 §3.4.1). The default record type. Returned for every name-to-address lookup unless the client specifically asked for something else.

run it right here; the dig tool has every option

open in the dig tool →

typeAwire type1rfc1035common ttl300

In one line:

example.isitdns.net.    A    192.0.2.1
└── this name ──────┘  └type┘ └── lives at this IPv4 address

What it holds#

A 32-bit IPv4 address, serialized as a 4-byte network-order field on the wire and rendered as dotted-quad (192.0.2.1) in tools (RFC 1035 §3.4.1).

When to use it#

  • Always, for any name that needs to be reachable over IPv4.
  • Round-robin: multiple A records under one name split connections across backends, no health checks.
  • At the zone apex, use A (with AAAA), not a CNAME; a CNAME cannot coexist with other data at the same name (RFC 2181 §10.1). See CNAME.

When not to use it#

  • For aliasing: use CNAME.
  • When you only have an IPv6 address: use AAAA.
  • To let clients discover the endpoint and protocol up front: publish https-svcb hints and keep A for fallback.

dig example#

Asks example.isitdns.net for its IPv4 address.

 dig @1.1.1.1 example.isitdns.net A
; <<>> DiG 9.20.11-0ubuntu0.2-Ubuntu <<>> @1.1.1.1 example.isitdns.net A
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21050
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;example.isitdns.net. IN A
;; ANSWER SECTION:
example.isitdns.net. 300 IN A 192.0.2.1
;; Query time: 39 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Mon Sep 14 13:45:34 CDT 2026
;; MSG SIZE rcvd: 64

GO NOERROR, one A record, 192.0.2.1

NO GO SERVFAIL, or any address that is not 192.0.2.1

run this query in the dig tool →

what each part of this output means →

See it live: isitdns.net/#dig?name=example.isitdns.net&qtype=A

Gotchas#

  • TTL implications. A short TTL on an A record makes failover fast but increases query load. See TTL trade-offs in fundamentals.
  • No load balancing semantics. Round-robin A returns all addresses; the client decides. If you need health-checked failover, that's an L4 load balancer's job, not DNS.
  • Proxied records at managed DNS providers. When a provider proxies a record (CDN edge proxy mode), the A record returns the provider's anycast IPs rather than your origin IP. Querying with dig reveals the proxy address, not what you configured in your zone. See nslookup-and-dig for how to compare authoritative vs. resolver answers.

See also#