It’s internal policy. We do run our own DNS.

But that's pretty much self-inflicted damage.