Computers find each other by IP address, strings of digits like 49.13.238.87. Great for machines, hopeless for humans. DNS (the Domain Name System) translates names you can remember into numbers computers understand. Every time you type an address, that phonebook gets consulted at lightning speed.
One name can hold several numbers, by the way, that’s how you spread traffic across servers.
You type primarydns.nl and hit enter. Here’s what happens, faster than a blink.
DNS answers more questions than just "where’s the website?". Each record type has its own job.
Every DNS answer carries a TTL (time to live): the number of seconds you may remember it. Caches, in your browser, your router, at your resolver, respect it. That’s why DNS feels instant: most questions have been asked before. Watch one expire live, right here.
Change a record and not everyone hears about it at once. Caches around the world politely wait for their own TTL to run out before fetching the new answer. No magic, just kitchen timers going off, some sooner than others.
DNS is old and naturally trusting: whoever answers first, wins. DNSSEC adds digital signatures. The root signs .nl, and .nl signs primarydns.nl, a chain of trust. If one link doesn’t check out, the answer is rejected.
Cache warm or cold? TTL short or long? DNSSEC on or off? Flip the switches and instantly see what happens to your lookup.
By default you use your ISP’s resolver. Fine, but not mandatory. Public resolvers are often faster, block malware or promise better privacy. And switching? A matter of minutes.
Classic DNS travels as readable text across the network. Anyone along the way can read it: the coffee-shop Wi-Fi, your ISP. DoT and DoH put your questions in an encrypted envelope; only you and your resolver know the contents.
Note: encryption hides what you look up, not where you browse afterwards.
Five toys for those who want to dig deeper. All dig-style, all live.
$