Description
Improves DNS handling for networks affected by forged or filtered DNS responses. It is useful for administrators who need the newer chinadns-ng design with epoll and ipset integration.
This kind of resolver sits close to core network behavior. Review the DNS servers, ipset rules, and firewall policy before relying on it, because mistakes can block websites or expose lookup patterns.