Domains
DNS records
Record types supported in Expanse Panel DNS and how to add, edit, or delete them.
DNS records
Open a zone from Networking by clicking the domain row. The Records tab is where you manage DNS for that zone.
Add, edit, delete
- Add: choose the record type, enter the name (often a subdomain or
@for the apex—follow the hints in the panel), TTL, and content (IP, hostname, or text depending on type), then save. - Edit: change TTL or content (and name if the panel allows) on an existing row.
- Delete: remove a record you no longer need. Destructive actions may ask for confirmation.
Changes are written to Expanse DNS immediately after save, subject to registrar verification rules on domains registered through Expanse (see registrant contacts).
TTL
TTL (“time to live”) tells resolvers how long to cache an answer. The panel offers common presets from one minute to one week; longer values reduce load but slow how fast changes propagate globally.
Record types supported
Below is what each type is typically used for. Names must follow DNS rules shown in the panel.
| Type | Purpose |
|---|---|
| A | Points a hostname to an IPv4 address. |
| AAAA | Points a hostname to an IPv6 address. |
| CNAME | Alias one name to another hostname (cannot coexist with other data on the same name in many cases—follow panel warnings). |
| MX | Mail routing: priority and mail server hostname. |
| TXT | Arbitrary text—used for SPF, DKIM, domain verification, etc. |
| NS | Delegates a subdomain to different nameservers. |
| SRV | Locates a service (e.g. SIP) with priority, weight, port, and target. |
| CAA | States which certificate authorities may issue TLS certificates for your domain. |
| PTR | Reverse DNS (often managed by whoever owns the IP block). |
| SSHFP | Publishes an SSH host key fingerprint for verification. |
| TLSA | DANE: binds a TLS certificate to the name in DNS. |
| SVCB / HTTPS | Service binding and HTTPS service parameters (modern service discovery). |
| NAPTR | Used in ENUM and some SIP routing setups. |
| HINFO | Optional host CPU/OS info (rarely needed today). |
| CERT | Stores certificate material in DNS. |
| SMIMEA | S/MIME certificate association for email. |
| OPENPGPKEY | OpenPGP public key for email. |
| URI | Maps a name to URIs with priority and weight. |
| LOC | Geographic location. |
| RP | Responsible person for the domain (machine-readable contact). |
| ZONEMD | Zone digest for zone integrity verification. |
| SPF | Legacy SPF type; prefer TXT for new SPF policies. |
If the panel hides a rare type for your zone, use what the UI offers—supported types match the product’s DNS engine.
Import and export
Where the product exposes import or export (JSON, CSV, or zone file formats), use them for bulk edits or backups. Always review a dry-run or preview if offered before applying imports.