Records
A: IPv4 address record
One record → one IPv4 address (RFC 1035 §3.4.1). The default record type. Returned for every name-to-address lookup unless the client specifically asked for something else.
In one line:
example.isitdns.net. A 192.0.2.1
└── this name ──────┘ └type┘ └── lives at this IPv4 addressWhat it holds#
A 32-bit IPv4 address, serialized as a 4-byte network-order field on the wire and rendered as dotted-quad (192.0.2.1) in tools (RFC 1035 §3.4.1).
When to use it#
- Always, for any name that needs to be reachable over IPv4.
- Round-robin: multiple A records under one name split connections across backends, no health checks.
- At the zone apex, use A (with AAAA), not a CNAME; a CNAME cannot coexist with other data at the same name (RFC 2181 §10.1). See CNAME.
When not to use it#
- For aliasing: use CNAME.
- When you only have an IPv6 address: use AAAA.
- To let clients discover the endpoint and protocol up front: publish https-svcb hints and keep A for fallback.
dig example#
Asks example.isitdns.net for its IPv4 address.
dig @1.1.1.1 example.isitdns.net A; <<>> DiG 9.20.11-0ubuntu0.2-Ubuntu <<>> @1.1.1.1 example.isitdns.net A
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21050
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;example.isitdns.net. IN A
;; ANSWER SECTION:
example.isitdns.net. 300 IN A 192.0.2.1
;; Query time: 39 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Mon Sep 14 13:45:34 CDT 2026
;; MSG SIZE rcvd: 64
GO NOERROR, one A record, 192.0.2.1
NO GO SERVFAIL, or any address that is not 192.0.2.1
See it live: isitdns.net/#dig?name=example.isitdns.net&qtype=A
Gotchas#
- TTL implications. A short TTL on an A record makes failover fast but increases query load. See TTL trade-offs in fundamentals.
- No load balancing semantics. Round-robin A returns all addresses; the client decides. If you need health-checked failover, that's an L4 load balancer's job, not DNS.
- Proxied records at managed DNS providers. When a provider proxies a record (CDN edge proxy mode), the A record returns the provider's anycast IPs rather than your origin IP. Querying with
digreveals the proxy address, not what you configured in your zone. See nslookup-and-dig for how to compare authoritative vs. resolver answers.