What is DNS? Understanding the Domain Name System
The global Domain Name System translates human-friendly domain names into machine-readable IP addresses — here's the hierarchy behind it.
Introduction to the Domain Name System
The Domain Name System (DNS) is a decentralized, hierarchical naming system that underpins all Internet communications. Every website, email service, API, and cloud application relies on DNS to resolve human-readable hostnames into binary-compatible network addresses.
Client Browser
│ (Query: example.com)
▼
Recursive Resolver (e.g. 1.1.1.1 / 8.8.8.8)
│
├──▶ 1. Root Server (.) ─────────▶ Returns .com TLD Server
├──▶ 2. TLD Server (.com) ───────▶ Returns Authoritative NS
└──▶ 3. Authoritative NS ────────▶ Returns IP: 93.184.216.34The DNS Hierarchy Explained
The DNS namespace is organized as an inverted tree structure:
- Root Zone (`. `): The apex of the hierarchy managed by ICANN and distributed across 13 root server IP clusters (A through M) operated globally via Anycast.
- Top-Level Domains (TLD): Categorized into Generic TLDs (`.com`, `.org`, `.net`, `.dev`) and Country Code TLDs (`.uk`, `.in`, `.de`, `.jp`).
- Second-Level Domains (SLD): The specific domain registered by an entity (e.g., `google.com` or `cloudflare.com`).
- Subdomains & Hostnames: Specific resource endpoints defined within the zone (e.g., `api.example.com` or `mail.example.com`).
Core DNS Record Types
| Record Type | Name | Primary Function |
|---|---|---|
| A | Address Record | Maps a hostname to a 32-bit IPv4 address (e.g., `192.0.2.1`). |
| AAAA | IPv6 Address Record | Maps a hostname to a 128-bit IPv6 address (e.g., `2001:db8::1`). |
| CNAME | Canonical Name | Creates an alias pointing one domain name to another canonical name. |
| MX | Mail Exchange | Specifies SMTP mail servers responsible for accepting domain email. |
| NS | Name Server | Delegates a DNS zone to authoritative nameservers. |
| TXT | Text Record | Carries arbitrary text, heavily utilized for SPF, DKIM, and site verification. |
| SOA | Start of Authority | Contains administrative metadata about zone serial, refresh intervals, and primary NS. |
| CAA | Certification Authority | Restricts which Certificate Authorities are authorized to issue SSL/TLS certificates. |
Example: A Resolved Zone (Illustrative)
A lookup against a well-configured domain typically returns a mix of record types like this:
example.com. 300 IN A 93.184.216.34
example.com. 300 IN AAAA 2606:2800:220:1:248:1893:25c8:1946
example.com. 86400 IN NS ns1.example-registry.net.
example.com. 86400 IN NS ns2.example-registry.net.
example.com. 3600 IN MX 10 mail.example.com.The short 300-second TTL on the A/AAAA records suggests the operator wants fast failover capability; the 86400-second (24-hour) TTL on the NS records is normal, since nameserver delegation rarely changes.
How to Inspect DNS Records
You can verify and diagnose your domain's live DNS configuration across global Anycast resolvers using our DNS Record Lookup Tool.
Guide FAQs
Key takeaways and technical clarifications.
Related Diagnostic Tools
Combine diagnostics for deep-dive network and DNS troubleshooting.