Why does SPF fail with too many lookups?

Each include, a, mx, ptr, exists and redirect costs a lookup, including those inside nested includes. More than 10 makes receivers return PermError.

Can I have two SPF records?

No. More than one v=spf1 record on a name is a PermError. Merge them into one.

SPF Check

SPF (Sender Policy Framework) is a DNS TXT record that lists the servers allowed to send email for a domain. This check parses the record, follows every include, and counts the DNS lookups against the limit of 10 that makes receivers return a PermError.

When to use this: You added a new sending service, or messages fail SPF, soft fail, or bounce with an SPF error. Command prefix spf:

About the SPF Check

Fetch and parse a domain’s SPF record, follow every include, and count the DNS lookups against the limit of 10 that causes a PermError.

FAQ

Why does SPF fail with too many lookups?: Each include, a, mx, ptr, exists and redirect costs a lookup, including those inside nested includes. More than 10 makes receivers return PermError.
Can I have two SPF records?: No. More than one v=spf1 record on a name is a PermError. Merge them into one.