having played with nstx and some predecessors, i recently ran across iodine. a quite refined pile of bits, this should give any general enterprise it manager an aneurysm.
consider… 802.1x generally requires _some_ dns resolution. and in most cases (small sample set), those are also caching recursive resolvers.