DNS sink to filter/block unwanted content a recursive DNS with DNSSEC to shield visited sites from ISP's DNS docker-based for easy initial deployment and low-friction, regular updates forwarding to ...