Authoritative and resolver DNS done right — sensible TTLs, geo-failover, DNSSEC where it makes sense, and filtering to keep the nasty stuff off your users.
Authoritative DNS with global anycast
Recursive DNS with filtering (malware, phishing, adult, custom)