One hostname, several A records
1st answer
93.184.216.34
2nd answer
93.184.216.35
3rd answer
93.184.216.36
The resolver hands back every record, usually in rotating order
DNS Load Balancing: How It Works and When to Use It
DNS load balancing distributes requests by returning one or more addresses for a hostname, sometimes selecting different answers based on location, health, or policy. It can spread traffic across regions, direct users toward nearby infrastructure, and provide a simple layer of failover. The exact behavior depends on the DNS provider and resolver caches. Standard DNS answers are not re-evaluated for every HTTP request, so a decision made when a resolver refreshes its cache can remain in use until the TTL expires. That makes DNS useful for coarse-grained traffic steering, but different from a load balancer that evaluates each new connection in real time.
Common DNS distribution strategies
Round-robin can rotate address order among a pool. Geographic or latency-based DNS can return regional endpoints based on the apparent location of a recursive resolver. Weighted routing can favor one endpoint over another, which is useful for controlled rollout or capacity allocation. Failover configurations can stop returning an endpoint after a health check detects a problem. Each feature has provider-specific details: health-check intervals, failure thresholds, resolver location inference, and TTL behavior all affect what end users see. Read the provider's implementation guide and test from representative networks before depending on the behavior.
| Method | Useful for | Important caveat |
|---|---|---|
| Round-robin | Basic distribution across equivalent endpoints | No health detection unless added separately |
| Geographic routing | Serving regions from nearby infrastructure | Resolver location may differ from user location |
| Weighted answers | Gradual traffic shifts or capacity proportions | Caching smooths and delays exact percentages |
| Health-based failover | Removing an unhealthy destination from new answers | Existing caches can retain the old destination |
Resolver location is an important subtlety. A geo-aware DNS service often sees the recursive resolver's address, not the individual user's device address. EDNS Client Subnet may provide additional location context in some systems, but it is not universally sent and has privacy considerations. As a result, one public resolver can represent many users and receive one regional answer on their behalf. Observing different DNS answers from separate locations is expected in some deployments, but it does not prove that a specific visitor was routed to the closest physical server.
DNS decisions are cached
A DNS TTL sets how long a resolver may cache an answer before refreshing it. Lower TTLs can make planned changes visible sooner after caches expire, but they increase query volume and do not guarantee instant propagation. A resolver can use an existing cached answer until its remaining lifetime ends, and applications can have their own caching or persistent connections. If an endpoint fails, DNS-based failover may therefore be slower than removing the endpoint inside a connection-aware load balancer. Consider both the critical recovery time and the expected cache layers before choosing DNS as the only failover mechanism.
- Define what makes an endpoint healthy and test the full application path.
- Check how the provider evaluates resolver geography and health status.
- Set TTLs based on operational needs, not on a belief that lower is always better.
- Use an application or network load balancer for fast, health-aware connection decisions.
- Monitor users from multiple regions to detect routing differences.
Plan and validate traffic changes
Before a traffic shift, confirm every destination is ready to serve the same hostname, certificate, and application behavior. Make a gradual change where the provider supports weighting, inspect logs and error rates, then increase traffic only when the results are healthy. For rollback, know how long caches can retain the previous answer and keep the old environment functional during that window. Do not rely on a single DNS lookup to confirm the percentage of real users reaching each backend; use service telemetry, provider analytics, or controlled probes that match actual client paths.
DNS is an effective global control plane when its strengths and latency are understood. It complements rather than replaces load balancers and application health checks. Read DNS round-robin explained for the simplest address-pool model and DNS TTL explained for caching behavior. A public DNS lookup shows what one resolver can retrieve at a moment; operations teams should combine that evidence with actual connection and application monitoring when assessing whether traffic is reaching healthy infrastructure.
Measure user experience at the application layer
A DNS policy is only successful if it improves the service users actually receive. Track latency, error rates, and availability at the application endpoint in each region, and compare those metrics with the DNS answers the provider is returning. The nearest resolver is not always the nearest user, and the nearest server is not always the least loaded or healthiest. Include synthetic checks from representative networks, but also review real traffic telemetry for outliers. If a routing policy sends users to an unhealthy region, adjust the health signal or fallback rather than just changing TTL. A well-instrumented rollout gives operators evidence about how weighting and regional selection behave under real cache conditions.
Need to check a domain's public DNS addresses? Use the Domain IP Lookup tool.
Related reading
Why a lookup shows the CDN, not the origin
Visitor
looks up the domain
CDN edge
104.21.x.x
this is what DNS returns
Origin server
real IP, never exposed
What Is an Origin Server? How It Works Behind a CDN
Learn what an origin server does behind a CDN or reverse proxy, why public DNS may show an edge address, and how to troubleshoot safely.
Why a lookup shows the CDN, not the origin
Visitor
looks up the domain
CDN edge
104.21.x.x
this is what DNS returns
Origin server
real IP, never exposed
What Is a Reverse Proxy? How It Works and Why It's Used
Understand how a reverse proxy sits between clients and servers, how DNS points users to it, and how it supports routing, TLS, and security.
Three roles, often three different companies
DNS Delegation Explained: How Parent and Child Zones Work
Learn how parent zones delegate domains to authoritative nameservers and why editing records at the wrong DNS provider has no public effect.