diff --git a/doc/source/afs.rst b/doc/source/afs.rst
index bf8e726227..c0d1aeb0ee 100644
--- a/doc/source/afs.rst
+++ b/doc/source/afs.rst
@@ -497,3 +497,15 @@ Perform maintenance, then restart as above and check the status again::
 
   root@afsdb01:~# bos status afsdb01.dfw.openstack.org -localauth
   Auxiliary status is: file server running.
+
+DNS Entries
+-----------
+
+AFS uses the following DNS entries::
+
+  _afs3-prserver._udp.openstack.org. 300 IN SRV 10 10 7002 afsdb01.openstack.org.
+  _afs3-prserver._udp.openstack.org. 300 IN SRV 10 10 7002 afsdb02.openstack.org.
+  _afs3-vlserver._udp.openstack.org. 300 IN SRV 10 10 7003 afsdb01.openstack.org.
+  _afs3-vlserver._udp.openstack.org. 300 IN SRV 10 10 7003 afsdb02.openstack.org.
+
+Be sure to update them if volume location and PTS servers change.
diff --git a/doc/source/kerberos.rst b/doc/source/kerberos.rst
index 7a16ba3fc9..748e57f45e 100644
--- a/doc/source/kerberos.rst
+++ b/doc/source/kerberos.rst
@@ -119,3 +119,20 @@ You should see::
 Once this is done the standby server is ready and we can take kdc01
 offline. When kdc01 is back online rerun `run-kprop.sh` to ensure
 everything is working again.
+
+DNS Entries
+-----------
+
+Kerberos uses the following DNS entries::
+
+  _kpasswd._udp.openstack.org.         300 IN SRV 0 0 464 kdc01.openstack.org.
+  _kerberos-adm._tcp.openstack.org.    300 IN SRV 0 0 749 kdc01.openstack.org.
+  _kerberos-master._udp.openstack.org. 300 IN SRV 0 0 88 kdc01.openstack.org.
+  _kerberos._udp.openstack.org.        300 IN SRV 0 0 88 kdc02.openstack.org.
+  _kerberos._udp.openstack.org.        300 IN SRV 0 0 88 kdc01.openstack.org.
+  _kerberos.openstack.org.             300 IN TXT "OPENSTACK.ORG"
+
+Be sure to update them if kdc servers change.  We also maintain a
+CNAME for convenience which points to the master kdc::
+
+  kdc.openstack.org. 300 IN CNAME kdc01.openstack.org.