Donate
BETA

Glossary

Clear definitions for common IP, DNS, and privacy terms

Use this glossary while reading our guides. Each term below is linkable via #term anchors.

IP Address

A numeric identifier for a device on a network. Public IPs are visible on the internet; private IPs are used inside local networks.

Learn more

IPv4

The most common IP format using four numbers like 8.8.8.8. IPv4 space is limited, which is why IPv6 exists.

Learn more

IPv6

A newer IP format using hexadecimal groups like 2001:4860:4860::8888. It provides a much larger address space.

Learn more

DNS (Domain Name System)

The system that maps domain names (example.com) to IP addresses so browsers can connect to websites.

Learn more

IP Geolocation

An estimate of where an IP address is located based on allocation data, routing patterns, and geolocation databases. It is not GPS and is usually city/region level at best.

Learn more

PTR Record

A DNS record used for reverse lookups: it maps an IP address back to a hostname. PTR records are commonly used by email servers and for diagnostics.

Learn more

Reverse DNS (rDNS)

A lookup that asks "what hostname is configured for this IP?". It typically uses a PTR record under in-addr.arpa (IPv4) or ip6.arpa (IPv6).

Learn more

WHOIS

A protocol/service used to retrieve registration information for domains and allocation/ownership info for IP address ranges. It's not the same as IP geolocation.

Learn more

RDAP (Registration Data Access Protocol)

A modern, structured protocol used to retrieve registration and allocation data for domains and IP resources. RDAP is the successor to legacy WHOIS for many registries and internet registries.

Learn more

ASN (Autonomous System Number)

A number that identifies a network/operator on the internet (an autonomous system). ASNs help route traffic across networks (BGP).

Learn more

ISP (Internet Service Provider)

A company that provides your internet connection (home/mobile). Your public IP address is typically assigned by your ISP.

CIDR

A notation for IP ranges like 203.0.113.0/24. It indicates how many bits are fixed in a network prefix, defining the size of a subnet.

Learn more

NAT (Network Address Translation)

A technique that lets many private devices share one public IP address via a router. It's why devices inside your home network aren't directly reachable from the internet.

Default Gateway

The local router address your device uses to reach other networks (including the internet). It is commonly something like 192.168.1.1 or 10.0.0.1 on home networks.

Learn more

Double NAT

A network setup where traffic is translated by two routers/NAT devices (for example an ISP modem/router plus your own router). It can complicate gaming, port forwarding, and inbound connections.

Learn more

CGNAT (Carrier-Grade NAT)

A large-scale NAT system used by ISPs that shares public IPv4 addresses across many customers using the 100.64.0.0/10 range (RFC 6598). It can block inbound connections and port forwarding.

Learn more

VPN

A Virtual Private Network encrypts your traffic and routes it through a VPN server, helping reduce tracking and protect data on untrusted networks.

Learn more

VPN Kill Switch

A VPN safety feature that blocks internet traffic if the VPN tunnel drops unexpectedly, helping prevent accidental IP exposure.

Learn more

Split Tunneling

A VPN feature that routes only selected apps or traffic through the VPN while other traffic uses the normal internet connection. Misconfigured split tunneling can cause leaks or inconsistent results.

Learn more

DNS Leak

A privacy issue where DNS queries bypass the VPN tunnel and go to ISP/public resolvers, revealing provider or location patterns even when your visible IP changes.

Learn more

WebRTC

Web Real-Time Communication is a browser technology for real-time audio/video/data connections. Depending on browser behavior and settings, WebRTC can expose IP-related information through STUN requests.

Learn more

STUN

Session Traversal Utilities for NAT is a protocol used by WebRTC and other apps to discover network path information. STUN behavior is one reason WebRTC leak tests matter for VPN users.

Learn more

Proxy

A server that forwards your traffic. Proxies can change apparent IPs but often don't encrypt traffic like a VPN.

Learn more

DNSBL (DNS-based Blackhole List)

A DNS-based list used by email/security systems to flag IPs associated with spam or abuse. DNSBL checks help determine whether an IP may be blocked or filtered by receiving systems.

Learn more

DDoS (Distributed Denial of Service)

An attack that overwhelms a target network or service with traffic from many sources. Gamers and streamers sometimes use VPNs and router hardening to reduce DDoS exposure risks.

Learn more

Public IP Address

An IP address that is routable on the public internet. It's what websites see when you connect from home or mobile networks.

Learn more

Private IP Address

An internal network address (RFC1918) that is not routable on the public internet, such as 10.x.x.x or 192.168.x.x.

Learn more

Dynamic IP Address

A public IP address that can change over time, typically assigned by your ISP via DHCP.

Static IP Address

A public IP address that stays the same over time. Often required for hosting services or consistent remote access.

Timezone

A regional time setting (for example, Europe/Chisinau or America/New_York). IP tools estimate timezone from IP geolocation data, so it may differ from your device clock settings.

Learn more

DHCP

Dynamic Host Configuration Protocol automatically assigns IP addresses to devices on a network.

ARP

Address Resolution Protocol maps an IP address to a device's MAC address on a local network.

IPv4 Exhaustion

The shortage of available IPv4 addresses, which led to widespread use of NAT, CGNAT, and IPv6 adoption.

Port Forwarding

A router feature that directs inbound traffic on a public IP/port to a specific device on a private network.

WPS (Wi-Fi Protected Setup)

A router feature designed to simplify Wi-Fi device setup (often using a button or PIN). Many users disable WPS for security and control reasons.

Learn more

Firmware

Low-level software running on hardware devices such as routers. Keeping firmware updated helps fix bugs, improve stability, and patch security issues.

Learn more

BGP (Border Gateway Protocol)

The routing protocol used between networks on the internet to exchange routes and reachability information.

A Record

A DNS record that maps a hostname to an IPv4 address.

Learn more

AAAA Record

A DNS record that maps a hostname to an IPv6 address.

Learn more

CNAME Record

A DNS record that maps one hostname to another hostname (an alias).

Learn more

MX Record

A DNS record that specifies the mail server responsible for receiving email for a domain.

Learn more

TXT Record

A DNS record that stores text values, often used for domain verification and email security records such as SPF, DKIM, and DMARC.

Learn more

NS Record

A DNS record that delegates a domain to specific authoritative name servers.

Learn more

TTL (Time To Live)

A DNS cache duration (in seconds) that tells resolvers how long to keep a record before refreshing it.

Learn more

DNSSEC

DNS Security Extensions add cryptographic signatures to DNS records to prevent tampering and spoofing.

Anycast

A routing method where multiple servers share the same IP and the network routes users to the nearest one.