1. Home
  2. Developer tools
  3. AAAA Record Lookup

AAAA Record Lookup

See whether a domain is reachable over IPv6. Enter the name and read its AAAA records in shortest and full form.

Free, no sign-up. Runs in your browser; see “Private by design” for the one online step.

How to use AAAA Record Lookup

  1. Enter a domain name.
  2. Choose a resolver.
  3. Press Look up.

Features

  • All AAAA records with TTL
  • Short (RFC 5952) and full notation
  • Kind of each address
  • Alias chains followed
  • Choice of resolver
  • Runs only when you press the button

Supported formats

Input

  • Domain names
  • Typed or pasted text

You get

  • IPv6 addresses
  • TTL

Private by design

Nothing is sent until you press the button. Then the domain names or addresses needed for the check (for example the name and the record type) are sent over HTTPS to the resolver you choose, Cloudflare (cloudflare-dns.com) or Google (dns.google), which see them under their own privacy terms and your IP address. openWorkstand never receives them. How local processing works

Good to know

  • It shows what the chosen public resolver returns.
  • A record that exists does not prove the server answers over IPv6.

Guide

Checking IPv6 addresses in DNS with AAAA records

An IPv6 address looks long and strange, but getting it into DNS is as simple as for IPv4: add an AAAA record. The record is called quad-A because an IPv6 address is four times as long as an IPv4 one. The page asks a resolver for a name’s AAAA records and shows them in both of the forms you meet in practice.

What the record does

An AAAA record maps a host name to a 128-bit IPv6 address. A site that publishes both A and AAAA records is reachable by either protocol, and clients choose. Browsers and operating systems prefer IPv6 when it works, using a method called Happy Eyeballs (RFC 8305) that starts the IPv4 attempt shortly after the IPv6 one, so a broken IPv6 path costs only a fraction of a second. A name without any AAAA record keeps working for everyone with IPv4; users on IPv6-only networks reach it through a translator (NAT64), which adds a hop.

The two address forms

IPv6 text can be shortened by dropping leading zeros and replacing one run of zero groups with a double colon. RFC 5952 fixes a single canonical way of doing this. The table shows that form, which is what tools print, and the full form with all eight groups of four digits, which is what you need to compare two addresses reliably or to build the reverse name by hand. The IPv6 Expander and IPv6 Compressor convert any address both ways.

The kind column

The last column classifies the address. Most records point at global unicast addresses, which begin with 2 or 3. A unique local address (starting fc or fd) or a link-local one (fe80) in a public name is a sign of a mistake, since neither is routed on the Internet. The documentation prefix 2001:db8::/32 should never appear in a live name either.

Introducing IPv6 safely

Adding an AAAA record is the last step of enabling IPv6, not the first. First the server needs a global address and a firewall that allows the same traffic as for IPv4, then the web server and any load balancer must listen on it, and monitoring should test it separately. Only then publish the record. A frequent cause of slow sites is an AAAA record that was added before the firewall rules were. The IPv6 Test tells you whether your own connection can reach IPv6-only servers, which you need to check it from the outside.

A worked example

Press Sample to look up cloudflare.com. The page lists AAAA records in a table with the address, the full form and the kind. When this guide was reviewed they were global unicast addresses beginning 2606:4700::; in shortened form 2606:4700::6810:84e5 and in full form 2606:4700:0000:0000:0000:0000:6810:84e5. The explanation underneath notes that a name without AAAA records is not broken but needs NAT64 for IPv6-only users. The addresses of large providers change over time; the layout does not.

Limits

A record in DNS shows what is published, not whether the host answers on that address. Some resolvers also synthesise AAAA records (DNS64) for IPv6-only clients; that is a service of the resolver, not data published by the domain. For a complete view of a domain use the DNS Lookup.

Checked against the current version of the AAAA Record Lookup on .

Frequently asked questions

If I add an AAAA record, can it break my site?

It can, if the server is not actually reachable on that address. Browsers prefer IPv6, so visitors with IPv6 would try the broken address first. They normally fall back after a short delay, but test with a real IPv6 connection before publishing.

Why does the page show each address twice?

One form is the shortened text of RFC 5952 that people write; the other is the full 39-character form that is easier to compare, search for and convert to a reverse DNS name.

What does it mean if a site has no AAAA record?

It is reachable only over IPv4. IPv6-only users can still reach it through NAT64, but it is slower and less direct.

Why is it called AAAA?

An IPv6 address is four times as long as an IPv4 address, so its record type is named four A’s.

Is anything sent over the internet?

Nothing is sent until you press the button. Then the domain names or addresses needed for the check (for example the name and the record type) are sent over HTTPS to the resolver you choose, Cloudflare (cloudflare-dns.com) or Google (dns.google), which see them under their own privacy terms and your IP address. openWorkstand never receives them.

Keep working with the result

openWorkstand also includes a free workspace with documents, spreadsheets, tasks, projects and a calendar that save to a folder on your computer.