CoreDNS, a fast, plugin based DNS server that serves authoritative zones and a hardened recursive resolver from a single Corefile.
CoreDNS is an open source, plugin based DNS server and a CNCF graduated project, best known as the default DNS server for Kubernetes. Its entire behaviour is composed from a chain of plugins in a single plain text Corefile, so one binary can serve authoritative zones from zone files, act as a caching and forwarding recursive resolver, export Prometheus metrics, and rewrite or filter queries, with no database and no web console to manage.
The cloudimg image is hardened and fully patched with CoreDNS preconfigured and running as a dedicated non root service. It ships secure by default and is not an open resolver: a demonstration zone is served authoritatively while recursion is restricted to the local host until you open it to your trusted subnets. First boot bakes the instance IP into the demo zone, and every instance is backed by a paired deploy guide and 24/7 cloudimg support.