A high-performance DNS proxy with threat intelligence, Shannon-entropy tunneling detection, and Prometheus metrics