i had the same thoughts @lkysow
i doin’t want to expose directly the servers to DNS requests so def run a small set of agents will help. Nevertheless even in this scenario there is a big overhead due all the protocols (serf,memberlist) that the agents runs by default.
How practical would be to turn this off and have only a “connected” DNS agent?