Alibaba Cloud DNS:Add a DNS record

Limits

• Obtain the public IPv4 address of the server to which you want to point your domain name. Example: 192.0.2.1.

  • If you use an Alibaba Cloud ECS server: You can view your public IP address in the Alibaba Cloud ECS console.

  • If you use a non-Alibaba Cloud server: Contact your service provider to obtain the public IP address of the server.

• If the host record is not @, an A record conflicts with an NS, CNAME, ALIAS, or URL record if they have the same host record and resolution line. If a conflict is reported when you add an A record, you can resolve the conflict by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	Different record types require different record values.	Select A from the drop-down list. This points the domain name to a specified IPv4 address.
   Hostname	The prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin: For A, AAAA, NS, MX, and TXT records, Alibaba Cloud DNS returns all records for the line. The Local DNS server selects which result to return. If the Local DNS server returns all addresses, the client selects one at random. Ratio: Returns a record from the Record Values based on the configured weights. For more information about how to configure weights, see Configure weights.	Round Robin
   Record Values	The public IPv4 address of the web server. You can add multiple addresses. If you set Record Values Load Strategy to Ratio, you can set the Ratio for each record value. When responding to a query, the system returns a record value based on the probability determined by its preset weight.	If you use an Alibaba Cloud ECS server: You can view your public IP address in the Alibaba Cloud ECS console. If you use a non-Alibaba Cloud server: Contact your service provider to obtain the public IP address of the server.

   Example

   

FAQ

• Does Alibaba Cloud DNS support port resolution?

• How do I configure DNS records in Alibaba Cloud DNS for a domain name not registered with Alibaba Cloud?

• A/AAAA record FAQ

A CNAME record, also known as a canonical name record, points a domain name to another domain name, which then provides the IP address. CNAME records are most commonly used for services such as CDN, enterprise email, and Global Traffic Manager.

Limits

• You have deployed a mailbox server and obtained the domain name for your email service.

• If the host record is not @, an MX record conflicts with an NS or CNAME record if they have the same host record and resolution line. If a conflict is reported when you add an MX record, you can resolve the conflict by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

Procedure

This section uses Alibaba Cloud Mail as an example and shows the required email records.

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	The required record value depends on the selected record type.	Select MX from the drop-down list. MX stands for mail exchanger. An MX record is used by email systems to find the mail server for a recipient's domain.
   Hostname	The prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin is the only supported method for retrieving record values. For A, AAAA, NS, MX, and TXT records, Alibaba Cloud DNS returns all records for the line. The local DNS server then selects a result to return. If the local DNS server returns all addresses, the client randomly selects one.	Round Robin
   Record Values	Record Value: Obtain the record value from your mailbox provider. You can add multiple values. For example, the record value for Alibaba Cloud Mail is mx1.qiye.aliyun.com. Priority: A lower MX priority value indicates a higher priority. For example, an email is first sent to mx1.qiye.aliyun.com with an MX priority of 5. If that attempt fails, the email is then sent to mx2.qiye.aliyun.com with an MX priority of 10.	Example: aliyundoc.com 5. Important The preceding steps describe only the settings for an MX record. To complete the mailbox setup, you must also set CNAME and TXT records. Contact your mailbox provider for the specific DNS records that you need to configure. If your mailbox provider is Alibaba Cloud Mail, see Add email DNS records.

   Example

   

FAQ

MX record FAQ

Limits

• Obtain the IPv6 address of the server to which you want to point the domain name in advance. Example: ff03:0:0:0:0:0:0:c1.

• If the host record is not @, an AAAA record conflicts with an NS, CNAME, ALIAS, or URL record if they have the same host record and resolution line. If a conflict is reported when you add an AAAA record, you can resolve the conflict by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	The required record value varies based on the record type.	Select AAAA from the drop-down list. This record type points a domain name to an IPv6 address, which is typically the IPv6 address of a web server. For example: ff03:0:0:0:0:0:0:c1.
   Hostname	The prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin: For A, AAAA, NS, MX, and TXT records, Alibaba Cloud DNS returns all records for the line. The Local DNS server selects which result to return. If the Local DNS server returns all addresses, the client selects one at random. Ratio: Returns a record from the Record Values based on the configured weights. For more information about how to configure weights, see Configure weights.	Round Robin
   Record Values	The IPv6 address of the web server. You can enter multiple addresses. If you set Record Values Load Strategy to Ratio, you can set the Ratio for each record value. When responding to a query, the system returns a record value based on the probability determined by its preset weight.	For example: ff03:0:0:0:0:0:0:c1.

   Example

   

FAQ

A/AAAA record FAQ

Limits

• If the host record is not @, a TXT record conflicts with an NS or CNAME record if they have the same host record and resolution line. If a conflict is reported when you add a TXT record, you can resolve the conflict by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

• The maximum length of a TXT record value is 8,192 characters.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	Different record types require different record values.	Select TXT from the drop-down list. TXT records are often used for SSL digital certificate validation and for Sender Policy Framework (SPF) records to prevent spam.
   Hostname	The prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin is the only supported method for retrieving record values. For A, AAAA, NS, MX, and TXT records, Alibaba Cloud DNS returns all records that match the specified line. The local DNS server then determines which record to return. If the local DNS server returns all addresses, the client randomly selects one.	Round Robin
   Record Values	TXT records are often used for verification. You can obtain the record value from your certificate service or email service provider. For example, you may need to add a TXT record for verification when delegating a subdomain. You can add multiple values. Note We recommend that you remove unused TXT records during regular maintenance. This helps prevent resolution failures that can occur if the number of TXT records for a single subdomain exceeds the limit on the recursive DNS servers of some carriers.	Example: 5d597b2c12464a7a8d0dde6b858ce543.

   Example

   

FAQ

TXT record FAQ

Limits

• The ALIAS record type is available only in the Ultimate and Exclusive Editions.

• For a single domain name, the Ultimate Edition supports up to 10 ALIAS records. The Exclusive Edition does not limit* the number of ALIAS records. For more information, see Edition comparison.

  *Unlimited: If you exceed the default system limit during actual use, you can request a parameter limit increase, provided the product remains stable and secure.

• If you downgrade a paid edition to the Personal or Free Edition, the ALIAS records are retained but become inactive. If you downgrade the Exclusive Edition to the Ultimate Edition and have more than 10 ALIAS records, the records are retained and resolve normally. However, you cannot modify them. To modify an existing ALIAS record, you must delete the excess records to bring the total count to 10 or fewer.

• The ALIAS record type is mutually exclusive with the DNSSEC feature. To use ALIAS records, disable DNSSEC for the domain name first.

• An ALIAS record conflicts with A, AAAA, and CNAME records, but not with other record types. For more information, see DNS record conflict rules.

• ALIAS records are supported only in Public DNS and are not yet supported in GTM.

Usage notes

• Because the ALIAS record type relies on public recursive servers, fluctuations in the public network or failures of recursive servers may cause resolution to fail. Therefore, no service availability SLA is provided for ALIAS record resolution.

• When Public DNS iteratively queries an ALIAS domain name, it uses the ECS field to pass the source IP address of the Local DNS query to the recursive server. If the recursive server supports this, a smart DNS result can be obtained.

• CDN providers may report that a CNAME record is not configured after you set an ALIAS record. You can provide feedback to the provider and suggest that they modify their check rules.

• The TTL of the response for an ALIAS record is based on the TTL configured for the record itself. It does not inherit the TTL from the external recursive query result.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	The record value that you must specify depends on the record type.	Select ALIAS from the drop-down list. An ALIAS record points a domain name to another domain name. The system automatically performs recursive resolution and returns the final IP address.
   Hostname	The prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Record values are returned based solely on Ratio. To configure weights, see Weight configuration.	Ratio
   Record Values	The target domain name. You can add multiple domain names. If you set Record Values Load Strategy to Ratio, you can set the Ratio for each record value. When responding to a query, the system returns a record value based on the probability determined by its preset weight.	Example: aliyundoc.com.

   Example

   

Prerequisites

When you add a URL forwarding record, the domain name to be forwarded is resolved to an Alibaba Cloud forwarding server, which then handles the forwarding proxy. Alibaba Cloud's URL forwarding servers are deployed in the Chinese mainland. Therefore, the domain name to be forwarded must have an ICP filing. The ICP filing does not have to be with Alibaba Cloud. To apply for an ICP filing with Alibaba Cloud, see ICP filing procedure.

Limits

• The record value for URL forwarding cannot be an IP address.

• The domain name to be forwarded cannot contain an underscore (_).

• URL forwarding does not support wildcard DNS records.

• The target domain name for URL forwarding cannot be a Chinese domain name.

• The domain name to be forwarded supports HTTP but not HTTPS. The target address supports both HTTP and HTTPS.

• If the host record is not @, a URL record conflicts with NS, CNAME, A, and AAAA records if they have the same host record and resolution line. If a conflict is reported when you add a URL record, you can resolve the conflict by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

• URL forwarding is a special feature. Alibaba Cloud DNS does not provide attack prevention for it. If you encounter a blackhole due to an attack, you cannot use URL forwarding. In this case, you must change the record for the host to an A or CNAME record.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	When you use Explicit URL Forwarding, accessing the forwarded domain name updates the address in the browser's address bar to the target address and displays the content of the target website. Implicit URL Forwarding ensures that when a user accesses a domain name configured with Implicit URL Forwarding, the content of the destination website is displayed, but the domain name in the browser's address bar remains unchanged.	Select Explicit URL Forwarding or Implicit URL Forwarding from the drop-down list.
   Hostname	The prefix of the subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin is the only supported method for retrieving record values.	Round Robin
   Record Values	Another website. Note For Explicit URL Forwarding: URL forwarding supports 301 permanent redirects and 302 temporary redirects. A 301 redirect indicates that a resource has been permanently moved. Search engines will replace the old URL with the new URL when crawling new content. A 302 redirect indicates that a resource is temporarily available at a new address. Search engines will crawl the new content but retain the old URL.	Example: www.aliyun.com.

   Examples

   Explicit URL Forwarding

   Implicit URL Forwarding

FAQ

URL forwarding FAQ

Limits

• Delegating a primary domain name (host record set to @) is not supported. To delegate a primary domain name to another DNS provider, change the DNS server addresses directly at your domain name registrar. For more information, see Change the DNS servers of a domain name.

• If the host record is not @, an NS record conflicts with all other record types if they have the same host record and resolution line. If a conflict is reported when you add an NS record, you can resolve the issue by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

Procedure

1. Add the subdomain to Alibaba Cloud DNS to obtain the DNS server addresses assigned to the subdomain. For detailed steps, see Subdomain management.

2. Go to the authoritative DNS server of the primary domain name to modify the DNS records for the subdomain. For example, if you use Alibaba Cloud Public DNS, go to the Alibaba Cloud DNS - Public DNS page and click the target domain name to go to the Settings page.

3. Click the Add Record button.

4. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	An NS record is used to delegate a subdomain to another DNS provider.	Select NS from the drop-down list.
   Hostname	The prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin is the only supported method for retrieving record values. For A, AAAA, NS, MX, and TXT records, Alibaba Cloud DNS returns all records for the specified line. The local DNS server then selects which record to return. If the local DNS server returns all addresses, the client randomly selects one.	Round Robin
   Record Values	The domain name of the authoritative DNS server for the subdomain. Note Other DNS providers typically provide multiple DNS server addresses. To specify all of them, you can add multiple NS records for the same host record (subdomain), each with a different record value.	For example, ns3.dnspod.net is a DNS server domain name provided by Tencent Cloud DNS.

   Example

Limits

• If the host record is not @, an SRV record conflicts with an NS or CNAME record if they have the same host record and resolution line. If a conflict is reported when you add an SRV record, you can resolve the issue by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	An SRV record specifies the server that provides a specific service. It also defines the address, port, priority, and weight for that service.	Select SRV. This record type points a domain name to another domain name, which is then used for address resolution.
   Hostname	The hostname for an SRV record follows the format _service._protocol.	Example: _sip._tcp
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin is the only supported method for retrieving record values.	Round Robin
   Record Values	The format is Priority Weight Port Target host	Example: 0 5 5060 www.cloud-example.com .

   Example

Limits

• If the host record is not @, a CAA record conflicts with an NS or CNAME record if they have the same host record and resolution line. If a conflict is reported when you add a CAA record, you can resolve the issue by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	A CAA record specifies which Certificate Authorities (CAs) are authorized to issue certificates for a domain. This prevents other CAs from issuing SSL/TLS certificates for the domain name, which helps prevent incorrect certificate issuance and improves website security.	Select CAA from the drop-down list.
   Hostname	The subdomain prefix.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Values Load Strategy	Round Robin is the only supported method for retrieving record values.	Round Robin
   Record Values	flag: The default value is 0. This indicates that if the issuing CA does not recognize this information, the information should be ignored. tag: Supports three values: issue, issuewild, and iodef. issue: Authorizes a single CA to issue any type of certificate for the domain name. issuewild: Authorizes a single CA to issue a wildcard certificate for the hostname. iodef: Allows the CA to send violation reports to a specified email address. value: The domain name of the CA or the email address for violation notifications. Example: "ca.cloud-example.com". Note: The value must be enclosed in double quotation marks.	Example: 0 issue "ca.cloud-example.com"

   Example

Limits

If the host record is not @, and the host record and resolution line are the same, an SVCB record conflicts with NS and CNAME records. Additionally, the alias mode and service mode of an SVCB record conflict with each other. If a conflict is reported when you add an SVCB record, you can resolve it by deleting the conflicting record or modifying the host record. For more information, see DNS record conflict rules.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	An SVCB record is a type of DNS record used for service discovery. It specifies information about supported protocols and Service Parameters.	Select SVCB from the drop-down list.
   Hostname	The prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)
   Record Set	Priority: A non-negative integer from 0 to 65535 that specifies the processing order for multiple SVCB records. Records with lower values have higher priority. If a service has multiple SVCB records, the client processes them in order of priority, starting with the record that has the lowest value. This is similar to the priority parameter for MX records. Note A priority of 0 indicates alias mode, which is similar to a CNAME record that points to another service name. In this mode, you cannot set Service Parameters. A non-zero priority indicates service mode. In this mode, you can define service parameters. Destination Zone Name: The domain name of the server that provides the service. This is also known as the target domain. In alias mode (where the priority is 0), the target domain specifies another service name for the client to resolve. In service mode, the target domain is typically the hostname that provides the service. The client then resolves this target domain to obtain the IP address of the service. Example: www.example.com. Service Parameters: A set of key-value pairs that define the service configuration and required features. These parameters provide clients with detailed guidelines and pre-connection information to optimize connection performance and security. The information can include desired protocol versions, a list of application-layer protocols (such as ALPN), Transport Layer Security (TLS) requirements, transport parameters, and IP address hints. Service Parameters provide clients with pre-connection information on how to access a service and optimize the connection for performance and security. For example: alpn="h2" ipv4hint="223.5.5.5" port="443" ech="MTIzNDU2Nzg=" Note Common Service Parameters: alpn="h3,h2": Indicates support for HTTP/2 and HTTP/3. ipv4hint="223.5.XX.XX": Indicates the IPv4 address of the target domain. ipv6hint="2400:3200::XX": Indicates the IPv6 address of the target domain. port="443": Indicates the port number. ech="MTIzNDU2Nzg=": A Base64-encoded string of the Encrypted Client Hello (ECH) configuration information. mandatory="alpn,port": A list of parameters that the client must understand and process. no-default-alpn: Indicates that there is no default application-layer protocol. If this parameter is present, the alpn parameter must also be present. dohpath="/dns-query{?dns}": The URI template for DNS over HTTPS (DoH) access. Separate multiple key-value pairs with spaces. The maximum length is 1,024 characters.

   Example

An HTTPS record is a specialized version of an SVCB record, specifically for describing HTTPS services. HTTPS records typically contain the same types of key-value parameters as SVCB records, but they are interpreted and processed with the assumption that the service protocol is HTTPS.

HTTPS records allow website operators to provide more detailed information about their HTTPS services, including which IP addresses are available and which protocols or service parameters are supported. This ensures that the most appropriate configuration is used the first time a client connects to the server, which reduces handshake latency, lowers the probability of connection failures, and enhances user privacy.

Limits

If the host record is not @, and the host record and resolution line are the same, an HTTPS record conflicts with NS and CNAME records. Additionally, the alias mode and service mode of an HTTPS record conflict with each other. If a conflict is reported when you add an HTTPS record, you can resolve it by deleting the conflicting record or modifying the host record.

Procedure

1. On the Alibaba Cloud DNS - Public DNS page, click the target domain name to go to the Settings page.

2. Click the Add Record button.

3. Complete the form fields.

   Form item	Description	Recommended value
   Record Type	An HTTPS record is a record type specific to HTTPS services. You can use an HTTPS record to specify a secure HTTPS connection protocol and an optimal service endpoint. This improves the security and reliability of HTTPS access.	Select HTTPS from the drop-down list.
   Hostname	Refers to the prefix of a subdomain.	For www.example.com, enter www. For example.com, enter @. For demo.example.com, enter demo. For test.blog.example.com, enter test.blog.
   Query Source	The source of the DNS query. In most cases, select Default. If you want to return different record values based on the visitor's location, you can set other sources, such as carrier or region. For more information, see Smart DNS and Custom lines. Important You must add a DNS record for the Default line as a fallback. This prevents resolution failures when a DNS query does not match any of the specified resolution request sources.	If you have no special requirements, keep the default value Default. For requests from Beijing and surrounding cities, select China Region_North China. For requests from the China Telecom network, select: China Telecom.
   Record Values	Priority: A non-negative integer from 0 to 65,535 that specifies the order in which multiple HTTPS records are processed. Records with lower values have higher priority. If a service has multiple HTTPS records, the client processes them in order of priority, starting with the record that has the lowest value (highest priority). This is similar to the priority parameter for MX records. Note A priority of 0 indicates alias mode, in which you cannot set service parameters. This mode is similar to a CNAME record and directs traffic to another service name. A non-zero priority indicates service mode, in which you can define service parameters. Destination Zone Name: Specifies the domain name of the server to which the client connects. In alias mode (priority 0), the target domain specifies another service name for the client to resolve. In service mode, the target domain is typically the hostname that provides the service. The client resolves this domain name to obtain the IP address of the service. For example, www.example.com. Service Parameters: A set of key-value pairs that defines the service configuration and required features. These parameters can provide information such as the desired protocol versions, a list of application-layer protocols for Application-Layer Protocol Negotiation (ALPN), transport layer security requirements, transport parameters, and IP address hints. Service Parameters allow a service provider (SP) to provide clients with detailed guidelines and pre-connection information for accessing the service. This optimizes the performance and security of the connection. For example, alpn="h2,h3" ipv4hint="223.5.XX.XX" ipv6hint="2400:3200::XX" port="443" Note Examples: alpn="h3,h2": Indicates support for HTTP/2 and HTTP/3. ipv4hint="223.5.XX.XX": Indicates the IPv4 address of the target domain. ipv6hint="2400:3200::XX": Indicates the IPv6 address of the target domain. port="443": Indicates the port number. mandatory="alpn,port": Specifies a list of required parameters. no-default-alpn: Indicates that no default application-layer protocol exists. If this parameter is present, the `alpn` parameter is required. dohpath="/dns-query{?dns}": Specifies the URI template for DNS-over-HTTPS (DoH) access. Separate multiple key-value pairs with spaces. The maximum length is 1,024 characters.	Example: aliyundoc.com.
   TTL	The time that the DNS record is cached on a carrier's Local DNS server. We recommend setting this to 10 minutes. A smaller TTL value means that changes to the record take effect faster for end users. For more information, see Configure TTL.	Edition Free Edition Personal Edition Enterprise Ultimate Edition Minimum TTL value 600 seconds (10 minutes) 600 seconds (10 minutes) 1 second Maximum TTL value 86400 seconds (24 hours) 86400 seconds (24 hours) 86400 seconds (24 hours)

   Example