Consica Labs

Consica Labs
Chapter 7

DNS

The Internet's phonebook

What Is DNS?

DNS stands for: Domain Name System

The Problem

Computers understand numbers. Humans prefer names.

Which is easier?

142.250.193.14
vs
google.com

Most people prefer names.

DNS converts google.com into 142.250.193.14

Real-Life Analogy

Think of DNS as your phone contacts.

Instead of remembering 9841234567, you save Mom.

DNS does the same for websites.

DNS Process

When you type google.com:

  1. 1DNS searches records
  2. 2Finds IP address
  3. 3Returns address
  4. 4Browser connects

This usually takes milliseconds.

Interactive Diagram

Launch the interactive diagram to see this in action.

Open Interactive Diagram
You type: google.com
DNS Resolver checks cache
Root ServerTLD Server
Authoritative Name Server
Returns IP: 142.250.193.14

The DNS lookup chain — typically completed in milliseconds.

Introduction

Every time you visit a website, your device performs a silent lookup. DNS works behind the scenes to connect names to numbers — making the internet usable for everyone.

Without DNS, you would need to memorize long strings of numbers just to check your email.

How It Works

Imagine you have a phonebook. You look up "Grandma" and find her number. DNS is like the internet's phonebook.

When you type a website name, DNS finds the number (IP address) so your computer can connect.

Key Idea: DNS translates names to numbers.


Deeper Dive

When you type a URL, your computer first checks its local cache. If no record exists, it asks a DNS resolver — usually provided by your ISP or a public service like Google DNS (8.8.8.8).

The resolver queries root servers, then TLD servers (.com, .org), then authoritative name servers to get the exact IP.

This cascade of lookups happens in milliseconds.


Advanced

The DNS hierarchy consists of four layers: Recursive Resolver, Root Server, TLD Name Server, and Authoritative Name Server. Each layer reduces the search space until the exact record is found.

Record types include A (IPv4), AAAA (IPv6), CNAME (alias), MX (mail exchange), and TXT (verification). DNS caching at every level reduces latency and global traffic load.

Security considerations: DNS spoofing, DNSSEC, and encrypted DNS (DoH / DoT) are critical for modern internet safety.

Vocabulary Table

Term Definition
DNSDomain Name System — translates names to IPs
Domain NameHuman-readable website address (e.g. google.com)
IP AddressUnique numeric identifier for a device on a network
DNS ResolverServer that performs DNS lookups on your behalf
Root ServerTop-level server that directs queries to TLD servers
TLDTop-Level Domain — .com, .org, .net, etc.
Authoritative ServerServer holding the actual DNS records for a domain
CacheTemporary storage of DNS results to speed up lookups
DNSSECDNS Security Extensions — prevents spoofing
DoH / DoTDNS over HTTPS / TLS — encrypted DNS queries

Fun Facts

  • DNS was invented in 1983 by Paul Mockapetris.
  • There are only 13 root server authority clusters worldwide.
  • Over 350 million domains are registered globally.
  • A DNS query can travel over 10,000 km in under 100 milliseconds.
  • Google's 8.8.8.8 handles billions of DNS queries every day.

Misconceptions

DNS is a single server

DNS is a distributed system involving thousands of servers worldwide.

DNS is the same as a web host

DNS only translates names to IPs — it does not host websites.

Changing DNS makes the internet faster

A faster resolver may improve lookup speed, but actual connection speed depends on bandwidth and routing.

DNS is always secure

Standard DNS has no encryption. DNSSEC, DoH, and DoT add security layers.

Knowledge Check

1. What does DNS stand for?

2. What does DNS convert a domain name into?

3. Which server is queried first in the DNS hierarchy?

4. True or False: DNS caches results to speed up lookups.

5. True or False: DNS queries are encrypted by default.

6. Match: A CNAME record is used for ___ .

7. Fill in the blank: The ___ server holds the actual DNS records for a domain.

8. Fill in the blank: DNS over HTTPS is abbreviated as ___ .

Show Answers

1. Domain Name System

2. An IP address

3. DNS Resolver

4. True

5. False

6. Domain aliases

7. authoritative

8. DoH

Critical Thinking

1. What would happen if all DNS servers went offline?

Consider how users access websites without numeric addresses.

2. Why might a company want to run its own DNS server instead of using a public one?

Think about speed, control, and security.

3. How does DNS caching affect a website after its IP address changes?

Explore the trade-off between speed and freshness.

Mini Projects

Project 1: Trace a Domain

Use nslookup or dig to find the IP address of three websites. Compare the results.

Project 2: Change Your DNS

Switch your device's DNS to Google (8.8.8.8) or Cloudflare (1.1.1.1). Note any difference in browsing speed.

Teacher Notes

Learning Objectives: Students should understand DNS as a name-to-IP translation system, the lookup hierarchy, and the importance of DNS security.

Discussion Prompts: Ask students what happens when they type a URL. Use the phonebook analogy for younger learners.

Assessment Ideas: Have students diagram the DNS lookup flow. Use the knowledge check as a quick quiz.

Extensions: Introduce DNSSEC, DNS over HTTPS, and how DNS blocking is used for content filtering.