How to Set Up AAAA Record for IPv6 Support on Your Domain

IPv6 is the future of the internet. With IPv4's pool of approximately 4.3 billion addresses nearly exhausted, IPv6 was designed to provide an virtually unlimited address space. If you want your website or server to support IPv6 connections, you need to add an AAAA record to your domain's DNS. This guide explains everything you need to know.

IPv4 vs IPv6: What's the Difference?

IPv4 is the original internet addressing system, using four groups of numbers separated by dots — for example 203.0.113.10 — providing about 4.3 billion unique addresses. This is no longer sufficient for today's internet.

IPv6 uses eight groups of hexadecimal values separated by colons — for example 2001:db8:85a3::8a2e:370:7334 — providing approximately 3.4 × 10³⁸ unique addresses, enough for every device imaginable well into the future.

What is an AAAA Record?

DNS has two primary record types for mapping domain names to IP addresses:

• A Record — Points a domain to an IPv4 address (e.g., 203.0.113.10)
• AAAA Record — Points a domain to an IPv6 address (e.g., 2001:db8::1)

The name "AAAA" reflects that an IPv6 address is four times the length of an IPv4 address (128-bit vs 32-bit). A domain can have both an A record and an AAAA record simultaneously — this is called Dual Stack. Modern browsers use the Happy Eyeballs algorithm, attempting both IPv6 and IPv4 connections simultaneously and using whichever succeeds first.

Understanding IPv6 Address Structure and Notation

An IPv6 address is 128 bits long, divided into eight 16-bit groups separated by colons, expressed in hexadecimal — for example 2001:0db8:0000:0000:0000:8a2e:0370:7334. This looks complex, but two shorthand rules make IPv6 addresses much more readable:

• Drop leading zeros — 0db8 becomes db8, 0000 becomes 0
• Use :: for consecutive all-zero groups — multiple adjacent groups of zeros can be replaced with :: once per address
• Example: 2001:0db8:0000:0000:0000:8a2e:0370:7334 shortens to 2001:db8::8a2e:370:7334

Why Add an AAAA Record?

• Many ISPs now assign IPv6 by default — Including in Thailand, ISPs are increasingly providing IPv6 prefixes to customers
• Better performance — IPv6 eliminates the overhead of NAT (Network Address Translation), reducing latency
• Future-ready — IoT devices and mobile networks increasingly rely on IPv6
• Googlebot supports IPv6 — Google crawls IPv6 addresses and may prefer them for faster crawling

Choosing the Right TTL for Your AAAA Record

TTL (Time To Live) controls how long DNS resolvers cache a record before querying again. Choosing the right TTL depends on your situation:

Pro tip: Before changing your server's IPv6 address, lower TTL to 300 seconds at least 24–48 hours in advance. This lets existing caches expire before you make the switch, minimising the impact on visitors.

How to Add an AAAA Record on DirectAdmin

1. Log in to DirectAdmin → Advanced Features → DNS Management
2. Click "Add Record"
3. Set Type to AAAA
4. In the Name field, enter @ for the root domain or a subdomain like www
5. In the Value field, enter your server's IPv6 address, e.g., 2001:db8::1
6. Set TTL to the default 14400 or 300 if you are testing
7. Click "Add" and wait 1–4 hours for DNS propagation

How to Verify Your AAAA Record

Using AsiaGB DNS Lookup

Visit asiagb.com/dns-lookup.html, select record type AAAA, and enter your domain name.

Using Command Line

On macOS/Linux Terminal or Windows PowerShell:

nslookup -type=AAAA yourdomain.com

Or using dig: dig AAAA yourdomain.com

Using Web Tools

mxtoolbox.com → DNS Lookup → select AAAA for a detailed view.

IPv6 Security Considerations

IPv6 was designed with security in mind — it natively supports IPsec (Internet Protocol Security) for encryption at the network layer, unlike IPv4 where IPsec was added as an extension. However, enabling IPv6 on your server introduces considerations you need to address:

• Firewall rules are not shared — IPv4 firewall rules do not automatically apply to IPv6 traffic. You must configure equivalent rules for IPv6 separately (e.g., iptables ip6tables or ufw with the --ipv6 flag).
• Log monitoring — Access logs will show IPv6 addresses in a different format. Ensure your monitoring tools and fail2ban configurations handle IPv6 addresses correctly.
• Privacy Extensions — Some client devices use IPv6 Privacy Extensions to rotate their source addresses periodically, which can complicate geo-blocking or rate-limiting rules.
• Web server listen directives — Apache and Nginx must explicitly be configured to listen on IPv6 ports alongside IPv4.

Configuring Apache and Nginx for IPv6

To serve traffic over IPv6, update your web server configuration:

# Apache — add to httpd.conf or listen.conf
Listen 80
Listen [::]:80
Listen 443
Listen [::]:443

# Nginx — add to server block
listen 80;
listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;

Dual Stack: Supporting Both IPv4 and IPv6

It is recommended to maintain both an A record (IPv4) and an AAAA record (IPv6) on your domain simultaneously. A large portion of internet users still connect over IPv4. With Dual Stack in place, browsers use the Happy Eyeballs algorithm — attempting both connection types in parallel and using whichever responds first. This delivers the best possible experience regardless of which protocol a visitor uses.