If there's no such thing as a free lunch, how can there be a free service that handles a network management function as critical as DNS? That's what corporate IT executives are wondering as they consider two vendors touting free DNS services that are supposedly ready for the enterprise.

Both vendors -- OpenDNS and NeuStar -- are offering free recursive DNS service, which is the type of DNS service that lets employees surf the Web by typing domain names into their browsers and translating them into the corresponding IP addresses.

The free services don't include external DNS, which is how a Web site such as Amazon.com publishes the latest information about its DNS and IP address changes to its customers over the Internet.

The question for corporate IT executives is whether the free recursive DNS services are too good to be true.

"There really is no reason why you wouldn't go down this road unless you've already invested heavily in an external DNS infrastructure, which is what all the major e-commerce sites have done," says Robert Whiteley, senior analyst with Forrester Research. "The vast majority of the market is still in need of making sure employees have better access to the Web."

Whiteley says outsourcing DNS is a good idea for many midsize organizations because they typically don't have expertise on staff to manage this critical function.

"DNS is the new black art," Whiteley says. (Though DNS is by no means new, celebrating its 25th birthday in 2008). "DNS is something that not a lot of companies have a good grasp of. There are few people who can manage their DNS environment well, who can scale it, secure it and bring it back online in the case of a disaster."

That's why Whiteley says the free recursive DNS services are a good choice for many companies.

"It's perfectly legit," Whiteley says, adding that DNS is "a blind spot for lots of organizations. Lots of organizations spend countless dollars on forward proxies, Web proxies and URL scrubbers to essentially achieve a similar capability. Now they don't have to be mucking around in DNS so much. Now they can offload recursive DNS so they can concentrate on other evolving threats."

OpenDNS pioneers free DNS

OpenDNS is the pioneer in the area of free DNS services.