Fundamentals 10 min read

Understanding DNS Root Servers: Their Role, Operation, and Global Distribution

This article explains what DNS root servers are, how they function in the hierarchical name‑resolution process, why there are only thirteen IPv4 root addresses, where they are located worldwide—including China’s nodes—and lists common public DNS services for both IPv4 and IPv6.

Top Architect
Top Architect
Top Architect
Understanding DNS Root Servers: Their Role, Operation, and Global Distribution

Domain Name System (DNS) is one of the most critical Internet services; without it we could not access websites or send email. When a client needs to resolve a domain name, the root DNS servers are the first point of contact in the hierarchical lookup.

What Is a DNS Root Server?

Root servers (or DNS root servers) are authoritative name servers that form the top of the DNS hierarchy. They host the root zone, which contains the complete list of top‑level domains (TLDs) such as .com, .net, .org, country‑code TLDs, and internationalized TLDs. The root zone is managed by the Internet Assigned Numbers Authority (IANA), a part of ICANN.

The root zone file publishes resource records for all TLD name servers. Consequently, root servers perform two functions:

Directly answer queries for records that exist in the root zone.

Refer the client to the appropriate TLD name server for the requested domain.

How Do Root Servers Work?

Resolution Process

When a user types www.example.com into a browser, the following steps occur:

The request first reaches the ISP’s DNS resolver (or any configured resolver). If the resolver has a cached answer, it returns the IP address immediately.

If the answer is not cached, the resolver queries the root servers. The root servers do not know the IP for www.example.com , but they know which TLD server (.com) is authoritative.

The root servers return a list of .com TLD name servers.

The resolver then queries a .com TLD server, which returns the authoritative name server for example.com .

The resolver finally queries that authoritative server, receives the IP address for www.example.com , caches it, and returns it to the client.

Why Only 13 Root Servers?

Historically there are 13 logical root server addresses (A‑M). This limitation stemmed from the 512‑byte size limit of a DNS response over IPv4; the root zone file could not fit into fewer than 13 packets. Each logical address now maps to a globally distributed anycast cluster containing hundreds of physical servers, providing redundancy and load balancing.

Physical Locations of Root Servers

Root servers are placed worldwide to ensure resilience. In China, there are 26 node locations, for example:

Beijing: I, L, J, K, F

Hong Kong: A, I, H, F, E, J

Taipei: I, E, F, K, L

Macau: E, F

Shanghai: L

Hangzhou: F

Zhengzhou: L

Wuhan: L

Xining: L

Guiyang: K

Public DNS Services (IPv4 & IPv6)

Commonly used public DNS resolvers are listed below. The IP addresses are provided in code blocks to preserve formatting.

114 DNS
Preferred: 114.114.114.114
Backup: 114.114.115.115
AliDNS (Alibaba Cloud)
Preferred: 223.5.5.5
Backup: 223.6.6.6
Baidu DNS
IPv4: 180.76.76.76
IPv6: 2400:da00::6666
Public DNS+
Preferred: 119.29.29.29
Backup: 119.28.28.28, 182.254.118.118, 182.254.116.116
CNNIC sDNS
Preferred: 1.2.4.8
Backup: 210.2.4.8
Tsinghua University DNS
IPv6: 2001:da8:200:ffff::28
Beijing University of Posts & Telecommunications DNS
IPv6: 2001:da8:202:10::36 or 2001:da8:202:10::37

Can China Gain More Influence in DNS?

Although China does not host any of the original IPv4 root servers, it already operates four IPv6 root servers (one primary and three secondary). With the nation’s rapid IPv6 deployment, this presence is expected to grow.

Conclusion

DNS underpins virtually every Internet service, and root DNS servers are the backbone of the global network. Understanding the 13 logical root servers, their operation, and the availability of public DNS resolvers helps engineers design more reliable and secure systems. Regular DNS audits remain essential for enterprise security.

securitynetworkingDNSinternet infrastructureRoot Server
Top Architect
Written by

Top Architect

Top Architect focuses on sharing practical architecture knowledge, covering enterprise, system, website, large‑scale distributed, and high‑availability architectures, plus architecture adjustments using internet technologies. We welcome idea‑driven, sharing‑oriented architects to exchange and learn together.

0 followers
Reader feedback

How this landed with the community

login Sign in to like

Rate this article

Was this worth your time?

Sign in to rate
Discussion

0 Comments

Thoughtful readers leave field notes, pushback, and hard-won operational detail here.