each tag maps to a dns entry