shouldn't there be a dns resolver in the services or something a la dnsmasq? something that could resolve names from db/hosts and DNS and Envoy realms and AD DC domains and cache them?