Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
FREEDOM251

Freedom251 › Blog › anycast

The DNS Root Is 13 Named Identities, Not 13 Clusters: How K-root Works and What Its Shared Address Means

By Freedom251 Team · · 4 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The 13 root letters, A through M, are named identities in the DNS root server system. They are not 13 clusters of machines. ICANN describes them as run by 12 independent operators and representing more than 1,500 individual servers. K-root, the K identity, is operated by RIPE NCC, the Amsterdam-based non-profit regional internet registry for Europe, the Middle East and parts of Central Asia. It answers from distributed nodes that announce the same IPv4 and IPv6 service addresses through anycast. Two figures in the headline, roughly 1.6 million queries per second and more than 140 sites, are not confirmed by current official material and should not be repeated as fact.

What the 13 letters actually name

IANA’s root servers listing maps each letter to its IPv4 and IPv6 addresses and to the operator responsible for it. A letter is therefore a stable name, a published address pair and an accountable operator. Behind a single letter there may be one machine or many. ICANN’s description of the system gives the scale in one figure: more than 1,500 individual servers across all 13 identities. That page does not print a publication date, so it is best read as ICANN’s current description rather than a dated census.

As an Amazon Associate I earn from qualifying purchases.

The headline’s wording misleads on three points, and the table below sets each claim against what the sources support.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Claim in the headline What current sources support Status
“13 root server clusters” 13 named identities (A–M), run by 12 independent operators according to ICANN’s description of the root server system Corrected: identities, not clusters
“Roughly 1.6 million DNS queries every second” No current measurement from a named root operator was found in the official material reviewed Not verified; do not state as a current rate
“More than 140 sites” RIPE NCC publishes a live list of hosted nodes, but the official material reviewed does not establish a current count Not verified; a count needs a date and must separate active nodes from sites
“All share a single IP address” IANA lists one IPv4 address and one IPv6 address for K-root, announced from many nodes Incomplete: two address families, distributed deployment
“Run by a Dutch non-profit” RIPE NCC operates K-root, and it is a non-profit regional internet registry based in Amsterdam Supported

How resolvers use the root

The root zone is referral information. It tells a resolver which servers are authoritative for each top-level domain such as .org or .uk. ICANN says the root identities provide identical root-zone information to resolvers. That consistency is what allows many independent operators to serve the same zone, and it is why a resolver receives the same referral whichever identity answers.

K-root: one identity served from many places

K-root is the K identity, operated by RIPE NCC and reachable as k.root-servers.net. RIPE NCC says it provides the service through distributed nodes using IPv4 and IPv6 anycast.

How anycast turns one address into many locations

Anycast means several nodes announce the same service prefix into internet routing. Each network’s routers select one of those announcements, typically the one their routing metrics rank best, so two users on different continents can send queries to the same destination address and reach different physical nodes. RIPE NCC’s public service description says each node announces service prefixes from AS25152 and runs one or more servers. Those servers run BIND, Knot or NSD, all open-source DNS programs.

Why “one IP address” is the wrong mental model

  • K-root has an IPv4 address and an IPv6 address in IANA’s listing. They are two address families reaching the same service, not one address.
  • The same address existing at many locations is the purpose of anycast. It is not evidence of a single machine.
  • A node can contain more than one server, so the number of nodes and the number of servers are different counts.

What happens when a node is cut off

RIPE NCC’s statement on RSSAC001v2, “Service Expectations of Root Servers Operators,” published 8 May 2026, says: “The RIPE NCC serves the IANA root zone and responds with complete and unmodified data on k.root-servers.net infrastructure.” The statement also says RIPE NCC monitors for current zone data. A node isolated from its controlling infrastructure can keep answering from the zone it holds until that zone expires. At that point the node automatically withdraws service rather than serving stale data indefinitely. The statement acknowledges that sites or servers may briefly differ while updates propagate.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to check K-root from your own network

  1. Look up the current K-root addresses in IANA’s root servers listing rather than relying on an address copied from an old article.
  2. Run dig +short k.root-servers.net A for the IPv4 record and dig +short k.root-servers.net AAAA for the IPv6 record. Each should return one address.
  3. Run dig . NS @k.root-servers.net. The answer should list the root server names, which confirms the node is serving root data.
  4. Repeat the first query from a different network, such as a mobile hotspot or a VPN exit in another country. The address returned stays the same, but traceroute paths and latency can differ, which reflects anycast routing rather than a different service.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Scope matters when you quote a number

A figure for “the root” aggregates across identities, operators and instances. A figure for one letter covers only that identity’s traffic or servers. These are different measures. Any sentence that mixes them, such as one saying K-root handles a given share of root traffic, needs a named source, a measurement period and a definition of the measure. Without those, the statement cannot be checked, and it should be left out.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

anycastDNSIANAICANNinternet infrastructureK-rootRIPE NCCroot servers

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.