Skip to content
Get Started
G2G2
4.7/5
Excellent
Trustpilot

What Is DNS (Domain Name System)?

DNS (the Domain Name System) is the internet's directory: it translates a name such as example.com into the IP address a computer needs to connect. Every visit to a website starts with a DNS lookup, usually answered in milliseconds from a cache.

  • Session Control
  • High Speed
  • Privacy First
Best fit for DNSRotating Residential Proxiesfrom$0.63/GB
how it works

How a DNS lookup works

Your device asks a recursive resolver, usually run by your ISP or a public service such as 1.1.1.1 or 8.8.8.8. If the answer is not cached, the resolver asks a root server where .com lives, asks a .com server which name servers hold example.com, then asks one of those authoritative servers for the record. The answer comes back with a TTL (time to live) that says how long it may be cached.

Classic DNS travels over port 53, mostly on UDP, unencrypted. DNS over HTTPS (DoH) and DNS over TLS (DoT) encrypt the query between you and the resolver.

  • 1

    A

    Holds
    An IPv4 address
    Example
    example.com → 203.0.113.10
  • 2

    AAAA

    Holds
    An IPv6 address
    Example
    example.com → 2001:db8::10
  • 3

    CNAME

    Holds
    An alias to another name
    Example
    www → example.com
  • 4

    MX

    Holds
    The mail servers for the domain
    Example
    10 mail.example.com
  • 5

    TXT

    Holds
    Free text: SPF, verification codes
    Example
    v=spf1 include:_spf.example.net ~all
  • 6

    NS

    Holds
    The domain's authoritative name servers
    Example
    ns1.example-dns.com
why it matters

Why DNS matters for proxy users

With a proxy, the question is who does the lookup: your machine or the proxy. That choice affects both privacy and the answers you get.

DNS: what it means for you
  • HTTP proxies resolve hostnames themselves, because your client sends them the name in the request or the CONNECT line.
  • With SOCKS5, socks5h:// sends the hostname to the proxy; plain socks5:// makes your own machine resolve it first, which is a DNS leak.
  • Large sites and CDNs answer DNS by location. Resolve from the wrong country and you may connect to a server for another region, even though your exit IP is right.
  • Your resolver sees every domain it resolves, so local lookups reveal your browsing to your ISP even when the pages go through a proxy.
try it

Look up a record from the command line

dig (macOS, Linux) and nslookup (every OS) query DNS directly:

CleanProxies rotating residential proxies use an HTTP(S) gateway, so hostnames are resolved on the proxy side, from the exit location you target.

A and AAAA lookupsShell
dig +short example.com A
dig +short example.com AAAA

# Ask a specific resolver
dig +short example.com A @1.1.1.1

# Windows
nslookup example.com

Rotating residential proxies from $0.63/GB

The CleanProxies proxy that fits best here, with a $4.99 trial to test it first.

Guides from the blog

Setup guides and best practices from the CleanProxies blog.

Get the latest insightsAll Blogs

Related terms

Terms that come up alongside DNS.

All glossary terms

DNS FAQs

Straight answers about DNS.

Domain Name System. It maps human-readable domain names to the IP addresses computers use to connect.

Got more questions?All FAQs