Health

How the resolver is actually performing. Latency figures exclude cache hits; those resolve in microseconds and would flatter every number equally.

Median lookup
0.0ms

p50, uncached

Slow tail
0ms

p95 · p99 231ms

Cache hit
0.0%

5,003 served locally

Failures
0.00%

63 SERVFAIL or REFUSED

Where the time goes

Distribution of uncached lookup times. A healthy resolver is a wall on the left with a thin tail; a fat middle means something is consistently slow.

Resolvers

Spread is p95 ÷ p50: how much worse a bad lookup is than a typical one. A high spread is the signature of an upstream that is usually fine and occasionally awful, which is what makes pages hang for no visible reason.

ResolverQueriesp50p95Spread
dns10.quad9.net4,05045.4551.2×
dns.cloudflare.com3,12318.2221.2×
one.one.one.one1,69521.4261.2×

Validation and transport

DNSSEC validated
0 answers carried a validated signature
0.0%
Encrypted transport
Every client is talking to this resolver in plain DNS over the LAN.
0.0%
NXDOMAIN
172 names did not exist
0.80%
Empty answers
Resolved without returning an address, often an AAAA lookup on an IPv4-only host
235

Slowest domains

Averaged over uncached lookups, minimum five queries. Usually an upstream problem wearing a domain’s name.