DNS record generator

Publish the right records in the right place

A and AAAA contain addresses; CNAME makes an alias; MX routes email; SRV describes a service endpoint. TXT formats text you already have, including records from the SPF / DMARC generator or DKIM generator. CAA controls certificate-authority authorization. SSHFP and TLSA require genuine public-key or certificate association data.

The export contains one SOA and your supplied apex NS records. It checks common syntax, duplicate records, CNAME conflicts and null-MX coexistence. It does not test propagation, authentication, public-key correctness, NAPTR expression behavior or provider support. Nameservers may also need registrar delegation and glue. Test a zone file with your authoritative server's native checker before importing it.

PTR must be configured in the reverse zone managed by the address owner or hosting provider. DS normally goes into the parent zone at your registrar. DNSKEY and signatures require an existing DNSSEC setup; this tool does not fabricate keys or sign the zone.

For other record types, choose generic TYPE and supply existing uncompressed wire-format RDATA as hex. This covers additional RR encodings, including SVCB/HTTPS or DNSSEC data, without pretending to validate their internal semantics. Query and meta types are rejected.

Generation runs in this browser. Inputs and exports are not sent to an API. Downloads contain the public zone records you supplied. Inspect the published DNS records after importing your changes.