We’ve all heard it before. Use Google DNS if you want speed. But here's the thing. DNS performance isn’t universal. The “fastest” option depends largely on where you are, what sites you visit, and what’s happening on the network at that exact moment.

In fact, when I ran a DNS speed test on my system, Google’s 8.8.8.8 not only missed the top spot, it wasn’t even in the top two. In other words, the only way to find the fastest DNS server is to test it on your own connection.

wifi router showing a red error light
Router vs. Computer DNS Settings: Here's What Was Faster

Comparing DNS at the router versus PC level led to real improvements in my network’s speed and performance.

3

How DNS speed tests actually measure performance

Different tools, different answers

DNSPerf and DNS Speed Test sites
Screenshot by Pankil Shah -- No attribution required

There are plenty of different tools for testing DNS speeds. Some, like GRC DNS Benchmark, require a download, while others, like DNSPerf, rely on global data and aggregated measurements. For this test, I went with DNS Speed Test because it runs entirely inside a browser and is also completely free with zero ads.

More importantly, DNS Speed Test doesn’t rely on synthetic benchmarks or distant servers. Instead, every query is sent from your actual network, which means your Wi-Fi quality, your ISP routing, and even the network congestion all come into play.

The tool uses DNS-over-HTTPS, or DoH, which is how most browsers handle DNS requests. Each lookup is encrypted and sent over HTTPS, just like when you load a website. In a way, it mimics what happens during everyday browsing and measures every request from start to finish using high-resolution timers inside your browser.

Another thing I like about this tool is that it doesn't just fire off cold requests. Before measuring anything, it first warms up each DNS server. This way, providers aren’t unfairly penalized for being slow on the first request but performing well once things are up and running. In other words, this is as close as you can get to a real-world DNS performance test.

Quiz
8 Questions · Test Your Knowledge

The MUO DNS & Networking Challenge

Think you know why the internet hesitates? Put your DNS and networking knowledge to the ultimate test.

DNSNetworkingProtocolsSecurityPerformance
01 / 8
DNS Basics

What does DNS stand for?

Correct! DNS stands for Domain Name System. It acts like the internet's phone book, translating human-friendly domain names like 'google.com' into machine-readable IP addresses so your browser knows where to connect.
Not quite — the answer is Domain Name System. DNS is the backbone of how we navigate the web without memorizing strings of numbers like 192.168.1.1 for every site we visit.
02 / 8
Performance

What is the term for the delay caused when your computer has to look up a domain name before loading a website?

Correct! DNS lookup time is the delay your device experiences while querying a DNS server to resolve a domain name into an IP address. Switching to a faster DNS provider like Cloudflare (1.1.1.1) or Google (8.8.8.8) can significantly reduce this pause.
Not quite — the answer is DNS lookup time. This is the specific delay caused by the name resolution process. While latency and packet loss are real networking issues, they describe different problems than the initial domain lookup pause.
03 / 8
DNS Servers

Which of the following is Cloudflare's primary public DNS resolver IP address?

Correct! Cloudflare's primary DNS resolver is 1.1.1.1, launched in 2018 with a focus on privacy and speed. It consistently ranks among the fastest DNS resolvers in the world and does not log your query data for advertising purposes.
Not quite — the correct answer is 1.1.1.1, which belongs to Cloudflare. For the record, 8.8.8.8 is Google's DNS, 9.9.9.9 is Quad9, and 208.67.222.222 is OpenDNS — all legitimate alternatives to your ISP's default DNS.
04 / 8
Protocols

Which port does standard, unencrypted DNS traffic typically use?

Correct! DNS operates on port 53 by default and uses both UDP for quick queries and TCP for larger responses or zone transfers. This is one of the most fundamental port numbers in networking and appears frequently in firewall and security configurations.
Not quite — DNS uses port 53. Port 80 is HTTP, port 443 is HTTPS, and port 25 is SMTP for email. Knowing these standard port assignments is essential for anyone configuring firewalls or troubleshooting network issues.
05 / 8
Security

What type of attack involves corrupting a DNS resolver's cache to redirect users to malicious websites?

Correct! DNS spoofing, also called DNS cache poisoning, involves injecting false DNS records into a resolver's cache so that users are redirected to attacker-controlled sites without knowing it. DNSSEC (DNS Security Extensions) was developed specifically to help defend against this threat.
Not quite — the answer is DNS spoofing (or cache poisoning). DNS tunneling uses DNS queries to smuggle data, ARP poisoning targets local network traffic, and BGP hijacking affects internet routing at a much larger scale. Cache poisoning is the attack specifically targeting the DNS resolution process.
06 / 8
Networking

What is a DNS TTL value used for?

Correct! TTL stands for Time To Live, and in DNS it specifies how many seconds a resolved record should be stored in cache before the resolver must query again. A low TTL means faster propagation of changes; a high TTL reduces DNS query load but slows updates.
Not quite — TTL in DNS defines the cache lifetime of a record, not hops, query limits, or encryption. Interestingly, IP packets also have a TTL field but it counts network hops, which is a common source of confusion since the same term means something different in each context.
07 / 8
DNS Types

Which type of DNS record is responsible for mapping a domain name to an IPv6 address?

Correct! The AAAA record (pronounced 'quad-A') maps a domain name to a 128-bit IPv6 address. The standard A record handles IPv4 addresses, while CNAME is an alias record and MX records direct email traffic to the appropriate mail servers.
Not quite — IPv6 addresses are stored in AAAA records. The A record handles IPv4, CNAME creates domain aliases, and MX records handle mail routing. As IPv6 adoption grows, AAAA records are becoming increasingly important in DNS configurations.
08 / 8
Curveball

In the original 1983 DNS specification (RFC 882), what was used to resolve hostnames before DNS existed and is still present on every modern operating system?

Correct! Before DNS, a centrally maintained HOSTS.TXT file was distributed to every computer on the ARPANET. Your OS still checks the local hosts file (located at /etc/hosts on Linux/Mac or C:\Windows\System32\drivers\etc\hosts on Windows) before querying DNS — which is why it can be used to block websites or override DNS locally.
Not quite — the answer is the HOSTS file, a flat text file that predates DNS entirely. It's still checked first during name resolution on every modern OS, which is why malware sometimes modifies it to hijack traffic, and why savvy users edit it to block ads or override specific domains without touching DNS settings.
Challenge Complete

Your Score

/ 8

Thanks for playing!

Putting DNS servers to test

Expect the unexpected

The best thing about the DNS Speed Test tool is how easy it is to run. Simply open it in your browser and hit Run Speed Test. The entire process takes less than a minute, and when it’s done, you’ll see the top three DNS providers ranked by response time in milliseconds.

This is the number that indicates how quickly a DNS server responds to a lookup request. Since most websites these days trigger multiple DNS lookups, even small differences can quickly add up. Scroll down, and you’ll also see a table that shows minimum, maximum, median, and average speeds of each DNS provider. This is handy because consistency matters just as much as raw speed.

In my case, neither Google DNS nor Cloudflare tops the list, even though they're known for speed. And that’s the thing about DNS servers. There’s no one-size-fits-all answer. It depends on several factors, like your location, how your ISP routes traffic, and even real-time network conditions. That’s why, instead of relying on general recommendations, it’s best to run your own test and see what works best for you.

Don’t trust your DNS test results right away

Run the test wrong, and the results mean nothing

DNS Speed Test host results
Screenshot by Pankil Shah -- No attribution required

Running the DNS Speed Test tool is easy enough, but you need to keep a few things in mind. For instance, running the test only once won’t paint the full picture. You should run it multiple times a day to smooth out random spikes and factor in network congestion.

By default, DNS Speed Test uses only popular websites like Google, YouTube, Facebook, ChatGPT, and Reddit for the test. And the problem is that most DNS servers aggressively cache these popular domains because they’re requested so often. This can make some servers look faster than they really are.

The good thing is, you can edit the list of websites used during the test. Adding smaller or less frequently visited sites, especially the ones you often visit, will give you a more accurate idea of how well a DNS server is performing. Lastly, make sure to clear the DNS cache so the results aren’t influenced by previously stored records.

Switching DNS servers is something everyone should do

It’s not all about speed

A monitor showing Windows DNS settings
Pankil Shah / MakeUseOf
Credit: Pankil Shah / MakeUseOf

Of course, switching DNS servers isn’t as dramatic as upgrading your internet plan or buying a faster router. But it still matters for a couple of reasons. When you stick with the default DNS server, your ISP can easily log your entire browsing history, which can be used for targeted advertising or even shared with third parties. An easy way to avoid that is to use a privacy-focused DNS server.

Switching DNS servers can also unlock some handy features. Some providers offer extra features that block malicious domains, filter ads, and prevent trackers from loading. It’s a great way to add a bit of privacy and security for free.

So yes, DNS may seem like a small change, but it’s still worth doing. Most importantly, speed isn’t the only factor. Privacy, reliability, and added features all play a role in choosing the right DNS.