https://labs.ripe.net/author/ramtin_kiaei/securing-network-infrastructure-for-dns-servers/