Instead of running local resolvers for caching, they should have used nscd DNS cache to decrease the volume of queries from those machines running the logs tasks. nscd is not designed for that, but is long known to have this best-use practice: https://prefetch.net/blog/2011/03/27/configuring-nscd-to-cac...