dnsmasq, a lightweight caching DNS forwarder plus DHCP and TFTP, resolving safely the moment it boots.
dnsmasq is a small, widely deployed network infrastructure daemon that combines a caching DNS forwarder, a DHCP server and a TFTP boot server in a single lightweight package. It is a popular choice for local networks, edge sites, labs and container hosts that need name resolution and address assignment without running heavyweight services.
cloudimg ships dnsmasq hardened, fully patched and configured as a secure caching resolver that answers only local network clients rather than the public internet, so it can never be abused as an open resolver. DHCP and TFTP ship switched off until you enable them for your own network. Paired with a step by step deploy guide and backed by 24/7 support.