DNS has both naming and cache invalidation, so no surprise it’s among the hardest things to get right. ;)