anchor.diff:  [id="nw-dns-forward_{context}"]
   = Using DNS forwarding
   
  -You can use DNS forwarding to override the forwarding configuration identified in `/etc/resolv.conf` on a per-zone basis by specifying which name server should be used for a given zone. If the forwarded zone is the Ingress domain managed by {product-title}, then the upstream name server must be authorized for the domain.
  +You can use DNS forwarding to override the default forwarding configuration in the `/etc/resolv.conf` file in the following ways:
  +
  +* Specify name servers for every zone. If the forwarded zone is the Ingress domain managed by {product-title}, then the upstream name server must be authorized for the domain.
  +* Provide a list of upstream DNS servers.
  +* Change the default forwarding policy.
  +
  +[NOTE]
  +=====
  +A DNS forwarding configuration for the default domain can have both the default servers specified in the `/etc/resolv.conf` file and the upstream DNS servers.
  +=====
   
   .Procedure
   
  
positive.code: $ oc edit dns.operator/default
  ----
  +
  This allows the Operator to create and update the ConfigMap named `dns-default` with additional server configuration blocks based on `Server`. If none of the servers has a zone that matches the query, then name resolution falls back to the name servers that are specified in `/etc/resolv.conf`.
  +
  .Sample DNS
  [source,yaml]
  
negative.code:             fallthrough in-addr.arpa ip6.arpa
          }
          prometheus :9153
          forward . /etc/resolv.conf 1.2.3.4:53 {
              policy Random
          }
          cache 30
          reload
  