| HowItWorksLab ¡ Systems
English

How DNS Domain Name Resolution Works

You type a name, but the network needs a number. Follow the lookup as a resolver walks the hierarchy and brings back the IP address for the site you asked for.

DNS NAME RESOLUTION · ONE FULL LOOKUP browser → recursive resolver → root → TLD → authoritative: query down the chain (blue) · reply back along the path (green) Browser (client) asks for a domain name Recursive resolver (local DNS) queries the chain on your behalf Root name server returns the TLD server TLD server (.com) returns the authoritative server Authoritative name server returns the IP for example.com Local cache stores records · speeds up next visit Resolved address (IP) example.com → 93.184.216.34 query query root query TLD query authoritative reply returns returns IP write to cache query (steps down the chain) reply (returns along the path)
The lookup, in order You type a name → Resolver is asked → Root → TLD → authoritative → IP comes back → Answer is cached
Display mode

Detailed Explanation

What is domain name resolution?

Domain name resolution is the process that turns a name people can remember, such as example.com, into the numeric IP address that computers actually use. Names are for us; addresses are for the machines. DNS is the system that keeps the two in step.

Because no single server holds the whole directory, the answer is found by asking a small chain of servers, each of which knows only its own part of the map. That chain is what this diagram follows.

Why does the lookup take several steps?

The DNS database is deliberately spread across levels so it can scale. A root server does not know every website; it only knows which server handles a top-level domain such as .com. That server, in turn, only knows which server is responsible for a particular domain. Only the authoritative server holds the actual record.

Each answer narrows the search until one server can reply with the final address, which then travels back the way it came.

Components & their role

1. The browser asks for a name

Everything starts when you enter an address. Before any page can load, the browser needs to convert the name into an IP address, so it hands the question to a recursive resolver.

2. The recursive resolver takes over

Rather than making your device walk the hierarchy, the resolver does the chasing. It checks its own cache first, and if the answer is missing it starts querying other servers on your behalf.

3. The root server points to the TLD

The resolver's first stop is a root name server. The root does not know the website, but it knows which server is responsible for the top-level domain — the .com part of the name — and sends the resolver there.

4. The TLD server points to the domain

The .com server does not hold the site's record either. It points to the authoritative name server for that specific domain, the only server that owns the real entries.

5. The authoritative server returns the IP

The authoritative server looks up the name and answers with the matching IP address. This is the only server in the chain that is allowed to give a final, authoritative answer.

6. The reply is cached

On the way back, the resolver stores the record for a while and hands the IP to the browser. Next time the same name is requested, the cached answer can be served immediately, skipping the whole chain.

What does DNS actually do?

DNS turns a human-friendly name such as example.com into the numeric IP address that computers use to find each other. Bookmarkable names stay readable while the network keeps working with addresses.

What is a recursive resolver?

It is the server your device asks first, usually provided by your ISP or a public service. Instead of making you walk the hierarchy, it does the chasing for you and hands back one final answer.

Why are there several servers in a lookup?

The DNS database is split across levels. A root server knows where the top-level domain servers are, a TLD server knows a domain's authoritative server, and only the authoritative server holds the actual record.

What is the difference between a root, a TLD and an authoritative server?

Each one answers a narrower question. Root points to the top-level domain, the TLD points to the domain's own server, and the authoritative server is the final source that returns the address for the specific name.

Why is a cached answer faster?

Once a resolver has a record, it stores it for a while. A repeat lookup for the same name can be answered straight from that cache instead of walking the whole hierarchy again.

Does my browser always repeat the whole lookup?

No. Browsers, operating systems and resolvers all keep short-lived caches. On a warm cache the full chain is skipped, which is why a second visit to a site often feels instant.

Common Misconceptions

One server holds every domain. People picture a single giant directory of all websites.
The directory is split across levels. Root, TLD and authoritative servers each know only their slice of the map.
Your browser always walks the whole chain. Every lookup is assumed to visit root, TLD and authoritative servers.
Caches usually skip most of it. If the record is cached, the answer is returned without repeating the chain.
The root server returns the site's IP. The first server contacted knows the final address for the site.
Only the authoritative server knows it. The root and TLD servers only point the resolver to the next place to ask.
Disclaimer: Diagrams are heavily simplified for educational demonstration only. Real-world systems contain far more variables and complexity. Not for engineering production use. Not financial, political or professional advice.