Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The DNS root is not 13 server clusters. It is 13 named root-server identities, labelled A through M, and together they are represented by more than 1,500 individual servers run by 12 independent operators, according to ICANN. K-root, the identity labelled K, is operated by RIPE NCC, the Amsterdam-based regional internet registry. It is delivered from distributed nodes using anycast, so one service address is announced from many locations. It is not a single machine, and it is not a single site. The headline’s figures of about 1.6 million queries per second and more than 140 sites cannot be confirmed from the current official sources, so this article does not repeat them as facts.

What the 13 letters actually count

The letters A through M are identities. Each one is a stable name and a pair of published addresses that resolvers use to reach the root. They are not a count of physical machines, data centres or clusters. IANA maintains the listing that ties each letter to its IPv4 and IPv6 addresses and to the organisation responsible for it.

Because there are 13 identities but 12 operators, at least one operator must run more than one letter. The 13 identities are the stable part of the system; the servers behind them can change without the labels changing.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Identity versus instance

Two terms cause most of the confusion around this topic:

#1 Best Overall
TP-Link AC1200 Gigabit Dual Band WiFi Router (Archer A6)
  • Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
  • Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
  • Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
  • MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
  • Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
  • Identity: one of the 13 root-server labels (A to M), each with its published addresses. Identities are fixed and are what appear in the root hints that resolvers start from.
  • Instance: a physical server, or a server inside a node, that answers queries on behalf of an identity. ICANN’s figure of more than 1,500 individual servers counts instances, as accessed in 2026.

So “13 servers” is wrong on two counts: there are 13 identities, and those identities are backed by well over a thousand machines.

What the root does for a resolver

When a resolver needs to look up a name such as example.org, it does not start with the name’s own authoritative server. It starts with the root. The root zone holds referral information that points to the servers responsible for each top-level domain, such as .org or .uk. From there, the resolver follows the referrals down to the server that actually holds the answer.

ICANN describes the root identities as providing identical root-zone information to resolvers. Any identity should therefore give the same referral answer, which is why a resolver does not need to know which letter, or which site behind a letter, it happens to reach.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
TP-Link ER605, Wired Gigabit VPN Router
  • 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
  • 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
  • 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
  • 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
  • Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q

K-root: who runs it and how it is deployed

RIPE NCC operates K-root, which is served under the name k.root-servers.net. RIPE NCC describes the service as distributed nodes that use IPv4 and IPv6 anycast.

Anycast and the single-address idea

Anycast means the same IP prefix is announced from several places on the internet. Routing then carries a query to one of those locations, usually a nearby one, and the reply comes from that node. Every node presents the same address, so to a user the service looks like one address worldwide, even though the traffic is handled by many separate machines.

The phrase “one IP address” is therefore shorthand that misleads in two ways. K-root has an IPv4 address and an IPv6 address listed by IANA, and the anycast deployment behind those addresses is distributed.

Rank #3
Sale
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54)
  • Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
  • Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
  • Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
  • Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
  • Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks

What runs on each node

RIPE NCC’s public service description says each K-root node announces the service prefixes from autonomous system AS25152. Each node consists of one or more servers running BIND, Knot or NSD. These are open-source DNS server software packages, so the K-root service is not tied to one vendor’s product.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How a node stays current

RIPE NCC states that it serves the IANA root zone and monitors nodes for current zone data. In its statement on the RSSAC001v2 service expectations for root server operators, published 8 May 2026, RIPE NCC said: “The RIPE NCC serves the IANA root zone and responds with complete and unmodified data on k.root-servers.net infrastructure.”

The same statement covers failure. A node that is cut off from the controlling infrastructure can keep answering from the zone it holds, but only until that zone expires. At that point the node withdraws its service automatically rather than serving stale data. RIPE NCC also acknowledges that for a short period, sites or servers may hold slightly different data while an update propagates.

Rank #4
Sale
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
  • DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
  • AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
  • CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
  • EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
  • OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.

Which numbers hold up

Several figures circulate with the headline. Only some of them are supported by current official material, and the table below separates them.

Claim Status in current official sources Wording to use
13 root server clusters Incorrect. The 13 are named identities. 13 named root-server identities, A to M
More than 1,500 individual servers Stated by ICANN, as accessed in 2026. The page gives no publication date. ICANN describes more than 1,500 individual servers across the 13 identities
12 independent operators Stated by ICANN 12 operators run the 13 identities
About 1.6 million queries per second Not verified. No named operator, period or measurement method was found. Omit, or attribute to a named operator with a date and a stated measure (peak, average or other)
More than 140 K-root sites Not verified. RIPE NCC publishes a hosted-node list, but this count was not confirmed. Omit, or give a dated count from the RIPE NCC node list and distinguish active nodes from sites
One IP address for K-root Incomplete. IANA lists an IPv4 and an IPv6 address. K-root uses one IPv4 and one IPv6 service address, announced from distributed nodes

A system-wide query rate and a single identity’s traffic are different measures, and each needs its own scope and date. Neither can be inferred from the number of identities or the number of servers.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why the root is split this way

The design separates two jobs. The 13 stable identities give resolvers a fixed starting point that rarely changes. The large number of instances, spread across operators and locations and reached through anycast, gives capacity and resilience. A failure at one node removes that node’s share of traffic, and routing carries queries to the remaining nodes announcing the same prefix, which is why the shared address does not create a single point of failure.

Best Value
TP-Link Dual-Band AX3000 Wi-Fi 6 Wireless Gigabit Internet Router for Home
  • Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure smoother streaming and faster downloads; support VPN server and VPN client¹
  • A More Responsive Experience: Enjoy smooth gaming, video streaming, and live feeds simultaneously. OFDMA makes your Wi-Fi stronger by allowing multiple clients to share one band at the same time, cutting latency and jitter.²
  • Expanded Wi-Fi Coverage: 4 high-gain external antennas and Beamforming technology combine to extend strong, reliable, Wi-Fi throughout your home.
  • Improved Battery Life: Target Wake Time helps your devices to communicate efficiently while consuming less power.
  • Improved Cooling Design: No heat ups, no throttles. A larger heat sink and redefined case design cools the WiFi 6 system and enables your network to stay at top speeds in more versatile environments.

The trade-off is that the identity layer is only as current as each instance’s copy of the root zone. That is why RIPE NCC’s zone monitoring and its automatic withdrawal after expiry matter more than the headline count of letters.

In short, the internet’s root is best described as a fixed set of 13 names backed by a large, distributed pool of servers, with K-root being one identity whose service is delivered from many nodes behind a single anycast address per protocol family.

For the scale and operator details, consult ICANN’s root server system page, IANA’s root servers listing, and RIPE NCC’s K-root pages, and check the publication dates on each before quoting a figure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Sources used: ICANN, “The Root Server System” (accessed 2026); IANA, “Root Servers”; RIPE NCC, “K-root”; RIPE NCC, “DNS and K-root”; RIPE NCC statement on RSSAC001v2 “Service Expectations of Root Servers Operators” (published 8 May 2026); RIPE NCC, “DNS (Domain Name System)”.

Quick Recap

Bestseller No. 1
TP-Link AC1200 Gigabit Dual Band WiFi Router (Archer A6)
TP-Link AC1200 Gigabit Dual Band WiFi Router (Archer A6)
MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
$44.99
SaleBestseller No. 2
SaleBestseller No. 3
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54)
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54)
Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
$29.99
SaleBestseller No. 4
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
VPN SERVER: Archer AX21 Supports both Open VPN Server and PPTP VPN Server
$69.99

“

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.