Skip to main content
spf PROTOCOLHost: Google Cloud DNSStandard: RFC 7208

How to Configure Sender Policy Framework (SPF) on Google Cloud DNS

Specifies which IP addresses and email service providers are authorized to send email on behalf of your domain. Follow this verified implementation guide to deploy standard compliant SPF DNS records in Google Cloud DNS.

Default SPF Record Syntax

// Authoritative RFC Example
v=spf1 include:_spf.example.com ~all

Configuration Steps in Google Cloud DNS

  1. 1Open the Google Cloud Console and navigate to Network Services -> Cloud DNS.
  2. 2Click the name of the managed zone containing the record.
  3. 3Locate the dangling CNAME record row.
  4. 4Click the trash icon or select and click "Delete record set".
  5. 5Review the transaction change and apply.

Verification Checklist (RFC 7208)

Extract TXT records on the root domain looking for "v=spf1".
Verify that there is strictly ONE SPF record (multiple records cause PermError).
Count total DNS lookups (RFC 7208 strictly limits recursive DNS evaluations to 10).
Ensure the record ends with "~all" (SoftFail) or "-all" (HardFail).
Live Validation Engine

Validate Your Google Cloud DNS SPF Record

Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.

Run Free DNS Validator