How DNS Works: The Internet’s Phone Book Explained
Every time you visit a website, DNS is working behind the scenes. Here’s how it works — in plain English.
Howdy Friends! If your site is serving every request directly from your origin server, you’re leaving performance on the table — and putting unnecessary load on your infrastructure. A CDN paired with a solid caching strategy changes that equation entirely. Let’s talk about why.
A Content Delivery Network (CDN) is a globally distributed network of servers — called Points of Presence (PoPs) — that cache copies of your site’s assets closer to your visitors.
Without a CDN, every request travels to your origin server regardless of where the visitor is located. A visitor in London hitting a server in Seattle is adding hundreds of milliseconds of latency on every request just from physical distance. A CDN eliminates most of that by serving cached content from a PoP geographically close to the visitor.
The result is faster page loads for visitors everywhere — not just those near your origin.
Caching is storing a pre-built copy of content so it can be served quickly without regenerating it on every request.
Without caching, a WordPress page load typically involves:
That process takes time and consumes server resources on every single request. With caching, the finished HTML is stored — either on the server or at the CDN edge — and served directly without any of that overhead. The server does the work once and serves the result many times.
These two layers work together but serve different purposes.
Origin caching happens on your server. A caching plugin or server-level cache (like FastCGI cache) stores pre-rendered pages. Even if the CDN misses and falls back to your origin, the origin doesn’t have to run the full PHP/database stack — it serves the cached page instead.
CDN edge caching happens at the CDN’s PoPs. Static assets (images, CSS, JS) and cached HTML pages are served from the edge without touching your origin at all. A cache hit at the CDN level is the fastest possible response time and generates zero load on your origin server.
The two layers stack. A well-configured setup means your CDN absorbs the vast majority of traffic, and your origin only gets hit when the CDN cache is cold or a request genuinely can’t be cached.
Cache behavior is controlled by HTTP headers. The most important is Cache-Control, which tells browsers and CDNs how long to cache a given response and under what conditions.
Key directives:
max-age=N — Cache this response for N secondss-maxage=N — Like max-age but specifically for shared caches (CDNs)no-cache — Revalidate with the origin before serving from cacheno-store — Don’t cache this at allpublic — Response can be cached by any cache (browser, CDN)private — Only the browser should cache this (not a CDN)Getting Cache-Control headers right is important. Caching a page that contains user-specific content (a logged-in dashboard, a shopping cart) can expose one user’s data to another. Dynamic, authenticated, or personalized content should never be served from a shared CDN cache.
TTL (Time to Live) is the duration a cached object is considered fresh. Longer TTLs mean better cache hit rates but slower propagation of updates. A common pattern is aggressive TTLs on static assets (images, fonts — weeks or months) and shorter TTLs on HTML pages where content changes more frequently.
Performance is the obvious benefit. Security is the less obvious one.
DDoS mitigation — A CDN absorbs volumetric attacks at the edge before they reach your origin. Your server never sees the flood.
Origin IP protection — If your traffic routes through a CDN, your origin IP isn’t exposed in DNS. Attackers can’t bypass the CDN and hit your server directly (as long as origin IP isn’t leaked elsewhere).
Bot filtering — Most CDN providers offer bot detection and rate limiting at the edge, filtering malicious traffic before it consumes origin resources.
TLS termination at the edge — The CDN handles the TLS handshake with the visitor. The connection between the CDN and your origin can still be encrypted, but the compute cost of TLS negotiation is offloaded to the edge.
Bunny.net is our CDN of choice at GR Host, and we recommend it to customers who need a CDN solution.
The pricing model is straightforward — pay per GB of bandwidth served, with no surprise fees. The global PoP coverage is strong, including solid coverage in regions that some CDNs underserve. Bunny’s Optimizer feature handles image optimization and WebP conversion automatically.
Bunny also gives you fine-grained control over cache behavior per zone, per URL pattern, and per content type. The pull zone setup is simple — point it at your origin, configure your cache rules, and you’re running. Cache purging is fast and available via API, which matters when you need to invalidate content after a site update.
Bunny.net fits well into our stack. It’s not trying to be everything — it’s a focused, well-priced CDN that does its job without unnecessary complexity.
Cloudflare is the other name worth knowing. It’s the largest CDN on the internet and sits in front of a significant portion of all web traffic.
Cloudflare’s free tier is genuinely useful — you get CDN, DDoS protection, and basic bot filtering at no cost. The paid tiers add features like image optimization, advanced firewall rules, Workers (serverless edge functions), and more granular cache control.
One distinction: Cloudflare operates as a reverse proxy. All DNS for your domain routes through Cloudflare’s network, which means they have full visibility into your traffic. For most use cases that’s fine. For privacy-sensitive or regulated environments, it’s worth understanding.
Cloudflare’s cache behavior is opaque by default — it makes its own decisions about what to cache unless you configure Page Rules or Cache Rules explicitly. Getting predictable caching behavior out of Cloudflare requires deliberate configuration.
It’s a powerful platform with a lot of surface area. For teams comfortable managing it, it’s excellent. For simpler setups, Bunny.net’s more focused approach is often easier to reason about.
A few rules of thumb worth following regardless of which CDN you choose:
Cache-Control: private or no-store on any response that contains user-specific data.Every GR Host WordPress plan is designed to work with Bunny.net CDN for static asset delivery. We configure origin cache headers correctly so that assets cache at the edge and your origin only handles what it needs to.
The result is faster load times for your visitors regardless of where they are, and lower resource consumption on your VM — which means more headroom for your actual site to breathe.
If you want to discuss your caching setup or add CDN integration to your hosting plan, get in touch — we’re happy to walk through the configuration with you.
Every time you visit a website, DNS is working behind the scenes. Here’s how it works — in plain English.
Every GR Host server runs Ubuntu LTS. Here’s why that decision matters for your site’s reliability and security.
A Linux kernel vulnerability called Dirty Frag was disclosed earlier this month. Here’s what we did about it and what it means for you.
Keep your files, photos, and documents private on your own server. Here’s what GR Host’s Nextcloud hosting offers and who it’s built for.
WordPress powers over 40% of the web. That makes it a massive target. Here are five security mistakes we see all the time — and how to avoid them.
Your domain is your address on the internet. Here’s where we recommend buying one.
At GR Host, every customer gets a dedicated VPS. No shared servers, no noisy neighbors. Here’s why that matters.
Lag ruins the Minecraft experience. Here are some simple things you can do to keep your server running smoothly.
Picking the right Minecraft server type makes a big difference. Here’s a simple breakdown of the most popular options.
GR Host’s 2026 Planned Holiday Business Hours
Excerpt
Three web servers dominate the hosting world. Here’s how Apache, NGINX, and Caddy work.
Plugins make WordPress powerful. They can also slow it down, break it, or get it hacked. Here’s how to use them the right way.
A CDN and proper caching strategy can dramatically improve performance, reduce server load, and protect your origin. Here’s why it matters and how we approac...
Not all WordPress hosting is created equal. Here’s what separates managed hosting from unmanaged and why it matters for your site.
Weak or reused passwords are one of the biggest risks to your WordPress site. Here’s how to do better without making your life harder.
Not every website needs WordPress. Here’s a simple breakdown to help you pick the right tool for the job.
GR Host’s 2025 Planned Holiday Business Hours
Learn how to setup DNS to enable email for your domain!
Virtual machines, containers, Kubernetes — the modern internet runs on these technologies. Here’s what they actually mean.
Every website asks about cookies. But what are they actually?
GR Hosts responding to the XZ vulnerability.
Version control is one of the most important tools in modern software development. Here’s why it matters, how Git works, and what CI/CD means for your workfl...
GR Host 2024 Holiday Business Hours
New Data Centers in Chicago and Washington DC
Computers, servers, drivers, firmware. Tese words get thrown around a lot. Here’s what they actually mean.