Domain Name Service (DNS) is a mapping of a domain name to an IP address, so that humans can remember computer address by a domain name instead of IP address. A DNS service is requested automatically when someone enters an web address on the web browser, so that the server knows how to find a website. When a user connects to the internet via a home router, the router gets an IP address and DNS server IP addresses via the DHCP it's Internet Service Provider (ISP). You may choose to use public DNS servers instead of the ones provided by your ISP by configuring your Internet connection manually.
A DNS leak is currently a major threat to user's online privacy and security since the network that is supposed to be anonymous is actually not, thereby providing a false sense of security to the user. A DNS leak is leaking of user's real IP address while connected to a VPN service. A DNS leak can occur in a situation where user's computer is unknowingly accessing default DNS servers rather than the anonymous DNS servers assigned by the anonymity network such as VPN. This happens when a DNS query fails to be routed through the anonymity network, causing a DNS leak, and thereby user's real IP address is exposed to the public network.
Despite high-level of IP anonymity and data encryption, services from various VPN network are prone to DNS leaks due to several reasons that include poor infrastructure. In simple words, a VPN user who believes to be using an anonymous connection is actually unaware of respective internet activity is outside the secure connection. Since DNS leak can cause revealing user's real IP address, many VPN providers are integrating anti-DNS leak features into their VPN software and prevent leaking of user's identity. Although DNS leak is caused due to several factors, a common scenario is when malicious websites adopt the policy of delaying website response to the user computer thus resulting in the browser switching to an unsecured DNS. Meanwhile, the newer Windows OS has a few in-built features which increase its susceptibility to DNS leaks.
Some VPN services comprise solutions that monitor DNS requests to ensure that they are routed through VPN network instead of the ISP network. A VPN user who may be concerned about the DNS leak may contact the VPN provider and verify if users are protected with this feature. Further, websites such as www.ipleak.net and www.dnsleaktest.com among others provide free DNS leak tests. If an user is connected to a VPN network and sees test result including ISP's DNS indicates that the user is exposed to a DNS leak.
Considering a serious privacy threat due to DNS leaks, several preventive measures have been identified for Internet users in general and VPN users in particular. Moreover, there are some VPN services which includes built-in anti-DNS leak solutions or fully-controlled DNS resolvers to ensure users' online privacy and security. In this regard, Hide My Ass VPN has come up with the following suggestions to prevent DNS leaks.
VPN users are extremely cautious about the privacy and security of their online activity and are more concerned about DNS leaks. Hence, users are advised to verify the traffic originating from their computer is routed through a secure VPN network so that no monitoring entity can track down the user's real IP address. Experts also recommend VPN users to change the computer network settings to use a static IP address to ensure that the new DNS settings are given high priority and not modified without intimation.