DNS resolution path template

Components in this network diagram

• Browser requests www.example.com
• In browser cache?
• OS stub resolver & hosts file
• In OS cache?
• Recursive resolver: 1.1.1.1 or ISP
• In resolver cache?
• Root server: refers to .com
• .com TLD server: refers to nameservers
• Authoritative nameserver: Route 53
• CNAME to CDN?
• Cloudflare CDN nameserver picks nearest edge
• A / AAAA record returned
• DNSSEC signature valid?
• SERVFAIL returned
• Cache with TTL & answer client
• Browser opens TCP / TLS connection

How to use this network diagram template

1. Click Open in the editor. The network diagram opens on a new page in FlowDiagram — nothing is uploaded and there is no sign-up.
2. Rename, add or delete shapes and drag them where you want; connectors stay attached as things move.
3. Drop in vendor logos from the library — 1,160 of them, including every AWS, Azure and Google Cloud service icon — or restyle it with the colour and theme controls.
4. Prefer text? Edit the Mermaid source below and paste it in through ☰ → Import diagram (see the Mermaid editor); it imports as an editable diagram.
5. Export to PNG, SVG or PDF, or press Ctrl+L for a link that carries the whole diagram.

Mermaid source

The whole template is the text below. Paste it into FlowDiagram, keep it in Git next to the code it describes, or hand it to an AI assistant to extend.

flowchart LR
  BROWSER([Browser requests www.example.com]) --> BCACHE{In browser cache?}
  BCACHE -->|No| OS[OS stub resolver & hosts file]
  OS --> OSCACHE{In OS cache?}
  OSCACHE -->|No| REC[Recursive resolver: 1.1.1.1 or ISP]
  REC --> RCACHE{In resolver cache?}
  RCACHE -->|No| ROOT[Root server: refers to .com]
  ROOT --> TLD[.com TLD server: refers to nameservers]
  TLD --> AUTH[Authoritative nameserver: Route 53]
  AUTH --> CNAME{CNAME to CDN?}
  CNAME -->|Yes| CDN[Cloudflare CDN nameserver picks nearest edge]
  CNAME -->|No| ARECORD[A / AAAA record returned]
  CDN --> ARECORD
  ARECORD --> SEC{DNSSEC signature valid?}
  SEC -->|No| SERVFAIL[SERVFAIL returned]
  SEC -->|Yes| ANSWER[Cache with TTL & answer client]
  RCACHE -->|Yes| ANSWER
  ANSWER --> CONNECT([Browser opens TCP / TLS connection])
  BCACHE -->|Yes| CONNECT
  OSCACHE -->|Yes| CONNECT

Related: System architecture diagram tool · Mermaid editor · All network diagrams templates · All 521 templates