This blog was originally published on November 26, 2021, and has since been updated for accuracy and clarity.
DNS, or Domain Name System, is the internet’s address book, connecting domain names to the records that power websites, email, and cloud tools. When DNS fails or is attacked, your business can lose access to essential services, send users to unsafe sites, or give cybercriminals a path into your environment.
In most cases, when someone visits your website, sends an email, or connects to a cloud application by name, DNS is working in the background, often using cached records. Most people never notice it until something breaks and websites, email, or cloud tools suddenly stop working the way the business expects.
At Intelligent Technical Solutions (ITS), we help small- to mid-sized businesses in healthcare, finance, and other regulated industries manage and secure the technology they depend on, including DNS.
For this article, we spoke with Peter Swarowski, ITS Chief Information Officer, to explain what DNS is, how it works, and why protecting it matters.
You will learn:
- What is DNS?
- Why is DNS important for your business?
- How do you protect your business from DNS attacks?
What Is DNS?
DNS stands for Domain Name System. It is a system that connects domain names to IP addresses so people can reach websites, email servers, and cloud applications. For businesses, DNS matters because it affects website availability, email delivery, cloud access, and cybersecurity.
Think of DNS as a phonebook for the internet. It is a hierarchical, distributed system that stores DNS records for domains and helps devices find the right online destination.
Without DNS, you would need to memorize a string of numbers to reach every website or service. DNS handles that lookup behind the scenes.
Here are the four key components that make DNS work:
- Domain Name: The name of your website, such as itsasap.com. Domain names make the internet easier to navigate by using human-readable words instead of long strings of numbers.
- IP Address: A numeric address assigned to a device or server to enable machines to find and communicate with each other over a network. For illustration, an IP address may look like 192.0.2.1.
- DNS Server: A DNS server helps answer DNS queries. Some servers look up records for users, while authoritative nameservers store the official DNS records for a domain.
- DNS Hosting Service: This service hosts and manages your DNS records on authoritative DNS servers. Many domain registrars offer DNS hosting, but businesses can also use a separate managed DNS provider.
DNS vs. Domain Registrar vs. DNS Hosting: What’s the Difference?
Before you can manage DNS well, it helps to understand the difference between DNS, your domain registrar, and DNS hosting. These terms are connected, but they are not the same.
Each one plays a separate role in helping people reach your website, email, and online services.
- Domain registrar: Where you register and manage your domain name.
- DNS hosting: Where your DNS records are stored and managed.
- DNS: The system that uses those records to direct users to the right website, email server, or online service.
Read: Who Should Manage Your Domain Name?
How Does DNS Work?
When you type a website address into your browser, DNS connects the domain name to the right IP address. That process is called domain name resolution.
In a typical DNS lookup, your device asks a DNS resolver for the website's IP address. If the resolver does not already have the answer cached, it checks the DNS hierarchy until it reaches the authoritative nameserver for that domain. The authoritative nameserver returns the correct DNS record, and your browser uses that information to connect.
Peter explains it this way: "Let's say you need to go to Facebook, so you type 'facebook.com' on your browser. You're not connecting to a service that is specifically facebook.com. There's a DNS resolution that says facebook.com is located at this IP address. Your computer will then connect to that address on a specific service port and then load the Facebook web page."
This entire process usually happens in milliseconds and is invisible to the user.
Why Is DNS Important for Your Business?
DNS is one of the cornerstones of how the internet operates. If a DNS server cannot translate a domain name to the right IP address, users simply cannot reach your site.
DNS also gives businesses flexibility. If you switch to a new web host or change your server, your IP address changes. DNS lets you update those records so visitors can continue finding your site with minimal disruption when the change is planned correctly.
As Peter notes, "[If] they move to a new IP address, they can go and update those records and kind of transition services over."
That flexibility matters for business continuity. However, it also makes DNS a target.
According to Forrester Consulting's 2025 DNS Security Survey, commissioned by EfficientIP, 95% of 218 surveyed senior security decision-makers at large North American and European companies said their organizations experienced DNS-related incidents in the past year, with the average cost of an attack reported at $1.1 million.
Read: 6 Reasons You Should Redirect Your Domain Name System (DNS)
What Are Common DNS Attacks?
Attackers often target DNS because changing or abusing it can redirect users, hide malicious activity, or help move data without immediate warning signs.
Here are three common DNS attacks businesses should understand:
- DNS hijacking happens when attackers change DNS settings or registrar records to redirect users to a destination other than the one they intended to reach.
- DNS cache poisoning happens when forged DNS responses are stored in a resolver's cache, silently sending users to malicious sites until the cached record expires.
- DNS tunneling hides data or command-and-control traffic inside DNS queries, making suspicious activity harder for firewalls and security tools to detect.
How Do You Protect Your Business from DNS Attacks?
Protecting DNS starts with controlling who can change it, where DNS requests are allowed to go, and how often your records are reviewed.
Here are the key steps that help reduce DNS-related risk:
Use multi-factor authentication
Enable MFA on your domain registrar and DNS provider accounts to prevent unauthorized access and changes.
Implement DNS filtering
A DNS filtering service blocks or warns users about known malicious domains before the site loads. NSA and CISA recommend using Protective DNS as part of a layered defense strategy because it can help stop access to known phishing, malware, command-and-control, and other suspicious domains.
Enable DNSSEC where supported
DNSSEC helps verify that DNS records have not been tampered with, reducing the risk of spoofed or poisoned responses. Note that DNSSEC does not encrypt DNS traffic, block malicious domains, or replace registrar account security. It is one layer in a broader DNS protection strategy.
Make sure devices use approved DNS resolvers
Configure company devices and remote users to route DNS requests through trusted, monitored, or protective DNS services instead of unmanaged public or ISP resolvers.
Audit your DNS records regularly
Remove DNS records pointing to decommissioned services to reduce dangling DNS and subdomain takeover risks.
Is Your Business DNS Secure?
DNS is one of the most important parts of your internet infrastructure. If it fails or gets compromised, people may not be able to find your business online, and attackers could use it to redirect traffic, disrupt services, or support phishing and other cyberattacks. Understanding how DNS works and what can go wrong is the first step toward protecting it.
Intelligent Technical Solutions has helped businesses secure their networks since 2003. Our team monitors DNS activity, manages security configurations, and helps you stay ahead of threats before they affect your operations.
Ready to review your DNS security? Schedule a free cybersecurity consultation to talk through your current setup and identify gaps. You can also request a free network assessment for a full evaluation of your infrastructure.
Want to Learn More?
Explore these resources in our Learning Center:
Frequently Asked Questions (FAQs)
Q: What is DNS in simple terms?
A: DNS is the system that translates domain names, such as itsasap.com, into the IP addresses computers use to connect to websites, email servers, and cloud applications.
Q: What happens to my business if DNS goes down?
A: If DNS fails, customers and employees may not be able to reach your website, cloud applications may become unavailable, and email delivery can be delayed or fail because mail servers cannot find where to send messages.
Q: Is DNS the same as a domain name?
A: No. A domain name is the human-readable address, such as itsasap.com. DNS is the system that looks up the domain name and returns the records computers need to connect to websites, email, and other services.
Q: Can DNS be hacked?
A: Yes, DNS can be attacked, hijacked, or abused. Attackers may redirect DNS traffic, poison cached records, or exploit misconfigurations to send users to malicious sites, support command-and-control activity, or exfiltrate data from your network.
Q: What is DNS filtering, and does my business need it?
A: DNS filtering blocks connections to known malicious or suspicious domains at the resolver level before content loads. Businesses use it to reduce exposure to phishing, malware, command-and-control domains, and other risky destinations.
Topics:
