A DNS server is a computer that answers Domain Name System questions. The term covers two different jobs. A recursive resolver looks up answers on a device’s behalf, while an authoritative name server publishes the records for a domain. Most people only encounter the first kind, usually through their internet provider, their router, or a public service such as Google Public DNS.
DNS exists so that software can use a human-readable name such as example.com to find the network records it needs to reach a service. Without that translation step, every app would need the raw network address of every site it wanted to open.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Forvencer Server Book, 2 Zipper Pocket, Server Books for Waitress | $7.99 | Buy on Amazon |
| 2 |
|
DNS and BIND (5th Edition) | $38.88 | Buy on Amazon |
| 3 |
|
Domain Name Server (DNS) Fundamentals: Exploring Traceroute, DNS Attacks and Beyond | $14.99 | Buy on Amazon |
As an Amazon Associate I earn from qualifying purchases.
The two meanings of “DNS server”
When someone says “DNS server,” they could mean either of the two roles below. The distinction matters because changing one affects your browsing, while the other controls where a domain’s records are published.
| Role | What it does | Who runs it |
|---|---|---|
| Stub resolver (client) | The device or application that asks a resolver for an answer. | Your phone, computer, or other software. |
| Recursive resolver | Receives the question, finds the answer by following the DNS hierarchy, may cache the result, and returns it. | Your internet provider, your router, or a public service such as Google Public DNS. |
| Root and top-level domain (TLD) name servers | Point the resolver toward the servers responsible for a given domain by referral. | Operated within the global DNS hierarchy. |
| Authoritative name server | Holds and serves the actual DNS records for a domain or zone. | Whoever hosts the domain, such as the owner or a DNS hosting provider. |
How a DNS lookup works
A typical lookup proceeds in the following order. The steps describe the usual path; a cached answer shortens it.
#1 Best Overall
- Upgraded Two Zipper Pockets: Forvencer server books feature two secure zipper pockets for better organization of coins, cash, and receipts, ensuring that everything you collect has a safe and secure place
- Smart Storage & Quick Access: Designed with 8 multi-functional compartments, the right side includes a guest receipt pad, while the left has a money pocket, ticket pocket, and credit card slot. Two small clear pockets store bills, receipts, and other visible items. A stitched pen loop ensures you always have your favorite pen ready
- High-quality & Easy to Clean: Crafted from high-quality PU leather with heavy-duty stitching, this server book is built to last. It resists tears, scratches, and its waterproof surface makes cleaning easy with just a damp cloth or a non-chlorine sanitizer
- Perfect Fit for Your Apron: Measuring 5” x 8”, this compact organizer is slightly smaller than other models, making it ideal for bending or sitting while carrying in your server apron. It holds everything a waitress needs—a place for everything
- What's Included: This server organizer comes with multiple open and zippered pockets to store money, receipts, tips, etc. Clear sleeves are perfect for keeping menus or special lists while serving. Available in a variety of colors, allowing you to express yourself even when in uniform
- An application on your device needs the address for a name, for example when you open a website.
- The device sends the question to its configured recursive resolver. On most networks this setting is supplied automatically (see the section on changing DNS below).
- If the resolver already holds a usable cached answer, it returns that answer and the lookup ends.
- If not, the resolver asks the root zone and top-level domain zones for the name servers responsible for the requested domain. Google’s public DNS documentation describes this use of NS records to locate authoritative servers.
- The resolver queries the authoritative server for the domain, which supplies the records.
- The resolver returns the answer to the device and keeps a cached copy for as long as the record’s time-to-live value allows.
Recursive resolver versus authoritative server
These roles are easy to confuse because both are called DNS servers, but they do different things. A recursive resolver answers questions on behalf of clients. An authoritative server is the source of truth for a domain’s records.
Google Public DNS is a recursive resolver. Google states that it is not authoritative for domains in general and is not a DNS hosting service. For programmable authoritative hosting, Google points readers to Google Cloud DNS instead. The practical consequence is simple: switching the resolver your device uses does not move a website or change where a domain’s records are published.
Should you change your DNS server?
Changing resolvers is optional. Most people never need to, and many networks already work well with the defaults. If you do want to change it, the steps below reduce the risk of getting stuck.
Rank #2
Record your current settings first
Networks commonly hand out DNS server addresses automatically through DHCP. Before editing anything, note the existing addresses or the automatic setting so you can restore them. Google’s setup guidance warns that procedures vary by operating system and that some systems require administrator privileges. Menu labels also differ between phones, computers, and router firmware, so follow your device’s own network settings rather than a generic path.
Example public resolver addresses
Google’s public DNS setup guide lists the following addresses for its own service. They are shown here as one provider’s example, not as a recommendation that suits every reader.
| Protocol | Primary | Secondary |
|---|---|---|
| IPv4 | 8.8.8.8 | 8.8.4.4 |
| IPv6 | 2001:4860:4860::8888 | 2001:4860:4860::8844 |
What changing your resolver does and does not do
- It changes which service receives and answers your device’s lookups on that configured connection.
- It does not host your domain or move any authoritative records.
- It does not automatically block sites. Google says its public resolver generally does not filter or block domains, with rare exceptions for security threats or legal requirements. Other resolvers may offer filtering, so check each operator’s policy and features.
- It does not guarantee faster browsing, better privacy, or stronger security for every user. Results depend on the service, your network, and where you are. The resolver operator handles every lookup it receives, so it can still see those queries.
Encrypted DNS and DNSSEC
Traditional DNS queries sent over UDP or TCP are not encrypted in transit. Three separate mechanisms are often mentioned alongside each other, and they protect different things.
| Mechanism | What it protects | Where it applies |
|---|---|---|
| DNS over HTTPS (DoH) | Carries DNS resolution inside HTTPS, shielding it from passive observation or tampering on that link. | Between the client and the recursive resolver. |
| DNS over TLS (DoT) | Carries DNS resolution inside TLS, with the same goal as DoH. | Between the client and the recursive resolver. |
| DNSSEC | Allows validation that signed DNS data is authentic. It does not encrypt queries. | Applies to the DNS data itself, through signed zones. |
Google describes DoH and DoT on one hand and DNSSEC on the other as complementary protections rather than substitutes. Encrypted transport protects the link to the resolver; it does not stop the resolver operator from seeing your queries.
How to compare resolver choices
If you are weighing one resolver against another, these are the factors worth comparing from the operator’s own documentation:
- Privacy policy and logging practices.
- Support for DoH or DoT, and how to enable it on your device or router.
- DNSSEC validation.
- Filtering and malware-blocking behavior, and whether it can be turned off.
- Reliability and the operator’s published service terms.
- Response times measured from your own network, rather than a claim from a provider’s marketing.
No single resolver is the best choice for everyone. Compare the features above against what you actually need, and keep a note of your original settings so you can switch back.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
