tls
sign
file/root
loadbalance
forward
bind
loop

dns://.:53 {
  bind eth0
  loadbalance round_robin
  forward . 127.0.0.1:5051 127.0.0.1:5052
}

127.0.0.1:5051 {
  forward . tls://8.8.8.8 tls://8.8.4.4 {
    tls_servername dns.google
  }
}

127.0.0.1:5052 {
  forward . 1.1.1.1 1.0.0.1 {
    tls_servername cloudflare-dns.com
  }
}



tls://.:853 {
  tls cert.pem key.pem ca.pem
}

https://.:443 {
  tls cert.pem key.pem ca.pem
}

. {
  bind eth0
  loop
  loadbalance round_robin
  forward . 8.8.8.8 9.9.9.9
  forward . tls://9.9.9.9 {
    tls_servername dns.quad9.net
    health_check 5s
  }
  cache 30
  hosts {
    10.0.0.1 example.org
    falltrough
  }
  hosts
  hosts /etc/hosts example.org
}