A DNS server processes queries, returns DNS records, caches responses, forwards requests, and supports service availability. These functions operate within the Domain Name System (DNS). For a broader introduction, see our guide to what a DNS server is and how it works.
Core Functions of a DNS Server
DNS server functions vary by role, but most support one or more of the following tasks.
| DNS Server Function | What It Does |
|---|---|
| Name resolution | Matches a domain name with the IP address or service record needed to reach a resource. |
| Query processing | Decides whether to answer from cache, return an authoritative record, or contact another server. |
| Authoritative record serving | Stores and returns official records, including A, AAAA, CNAME, MX, and TXT. |
| Caching | Stores responses according to their Time to Live to reduce repeated lookups. |
| Query forwarding | Sends requests to another resolver when the local server cannot complete the lookup. |
| Availability support | Uses redundancy and distributed routing to reduce single points of failure. |
Together, these functions support accurate answers, response speed, and service continuity.
DNS Server Roles in the Resolution Path
Different DNS servers perform different roles during a lookup:
-
A recursive DNS resolver receives the query from a user’s device and works to find the answer.
-
A root DNS server directs the resolver to the appropriate Top-Level Domain server.
-
The TLD DNS server points the resolver to the domain’s authoritative nameserver.
-
The authoritative DNS server returns the official DNS record for the requested domain.
Caching and forwarding servers reuse stored responses or send requests to another resolver. Cached answers remain valid for their Time to Live (TTL).
DNS Resolver vs. Authoritative Nameserver
A DNS resolver and an authoritative nameserver perform separate functions within the DNS system.
| Term | Role |
|---|---|
| DNS server | A broad term for infrastructure that processes queries, stores records, or returns responses. |
| Recursive DNS resolver | Checks its cache and queries other DNS servers when a fresh answer is required. |
| Authoritative nameserver | Stores a domain’s official records and returns authoritative answers. |
What Affects DNS Server Performance?
DNS server performance depends on infrastructure design, network conditions, and record configuration. Anycast routing directs queries to a nearby healthy location, while geographic distribution reduces network distance.
Caching lowers external lookups, but TTL values must balance faster changes against higher query volume. Capacity, routing quality, health checks, and failover help maintain stable performance. DDoS attacks, configuration errors, and poor peering can increase latency or prevent resolution.
Key DNS Performance Metrics
- Query Response Time (P50 and P95): Measures typical DNS latency and slower edge cases.
- Availability: Tracks how consistently the DNS service responds successfully.
- Cache Hit Ratio: Shows how often queries are answered directly from cache.
- Queries per Second (QPS): Indicates the request volume the infrastructure can process.
- SERVFAIL Rate: Measures how often a DNS server cannot complete a query.
- Propagation Time: Tracks how quickly DNS record changes become visible across resolvers.
Improving DNS Availability and Reliability
Organizations can improve DNS reliability through distributed authoritative DNS, IP Anycast, redundancy, and continuous monitoring.
Traffic steering and smart routing direct users toward healthy infrastructure. Teams should review TTLs, maintain accurate records, configure failover, and protect DNS services against attacks and DNS hijacking.
Operational Limitations and Misconceptions
- DNS identifies where a service is located, but it does not deliver the application content.
- Faster DNS responses cannot compensate for a slow origin server or application.
- Low TTLs support faster changes, but they also increase query volume.
- High TTLs reduce lookup demand, but they can delay record updates.
- DNS availability does not guarantee that the destination service is healthy.
- Recursive resolvers and authoritative DNS services perform different roles and cannot replace each other.
CDNetworks Cloud DNS+
CDNetworks Cloud DNS+ is a managed authoritative DNS service for global availability, performance, and control.
Built on a global IP Anycast network, it supports fast resolution during normal traffic, regional disruptions, and traffic spikes. Near-real-time propagation helps services respond quickly to infrastructure changes.
Feature Highlights:
- IP Anycast: Routes users to a nearby healthy DNS location.
- Cloud Load Balancer: Distributes web traffic for performance and availability.
- DNSSEC: Protects records against tampering and DNS hijacking.
- Staging Zone: Lets teams test DNS settings before publishing changes.
Learn more about CDNetworks Cloud DNS+ or download the product brochure.
