. {
    # Cache responses (success and denial)
    cache {
        success 9984 300 3600
        denial 9984 60 300
        prefetch 10 1m 10%
    }

    # Forward to upstream DNS
    forward . 1.1.1.1 8.8.8.8 1.0.0.1 8.8.4.4 {
        policy random
        health_check 30s
    }

    # Log errors only
    errors

    # Limit concurrent connections
    bufsize 1232
}