---
title: What is DNS Filtering
slug: what-is-dns-filtering
docTags: 
createdAt: 2026-09-04T10:49:48.855Z
---

## Overview

The Domain Name System acts as the foundational directory of the internet. It translates human-readable domain names into the machine-readable IP addresses required to load a webpage, connecting the user to the correct destination.

:::hint{type="info"}
While a standard DNS simply resolves the address, a filtered DNS service acts as a proactive security barrier. It inspects traffic and enforces rules before any connection is ever established.
:::

## How the Resolution Flow Works

When a device requests access to a domain, the filtering infrastructure executes an instant analysis against a globally updated database:

- **Safe Domains:** If the requested destination is classified as clean, the connection proceeds normally.
- **Blocked Domains:** If the destination is linked to malware, phishing, or violates company policies, the resolver blocks the request. The user is redirected to a safe warning page, ensuring the malicious payload never reaches the local network.

**Key Benefits of DNS-Level Protection**

| **Benefit**                    | **Focus & Description**                                                                                                                                            |
| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Proactive Threat Blocking**  | Stops cyberattacks, ransomware, and phishing attempts directly at the resolution stage, neutralizing threats instantly.                                            |
| **Universal Network Coverage** | Updating the main router automatically extends protection to every connected device, including smartphones and printers, without requiring software installations. |
| **High-Speed Performance**     | Utilizes a globally distributed Anycast network to ensure ultra-fast domain resolution and zero latency degradation.                                               |
| **Granular Content Control**   | Allows administrators to restrict access to specific website categories, block unwanted applications, and enforce safe search protocols.                           |
| **Device Portability**         | Deploying endpoint agents ensures the exact same security rules follow remote workers and mobile devices across any external Wi-Fi network.                        |