(Thanks for the links you provided to the front ends in your other comment). Would like to point out that ddos is a ymmv item obviously for anyone scared off b

(Thanks for the links you provided to the front ends in your other comment). Would like to point out that ddos is a ymmv item obviously for anyone scared off by the potential for this which is the same as the potential for any ddos attack and mitigation. A company affiliated with ours has been managing dns for a customer since 1996 with 10k zones. Back when you had to read Cricket Liu Oreilly book. (movie.edu if anyone remembers). They've never experienced a problem. All run on pretty low powered hardware for that matter. That said there are things to know about dns while not difficult time could be better spent elsewhere if there is no compelling reason to diy.