Our path toward resilient DNS infrastructure