Use when adding dnsdist in front of PowerDNS Recursor to get true client IP attribution
and dnstap-based “Pi-hole-like” logging. Covers common docker/dnsdist gotchas:
(1) dnsdist container entrypoint/command pitfalls, (2) dnsdist newServer() not accepting
hostnames like recursor:5300, (3) dnstap CLIENT_* field mapping where QueryAddress is the
downstream client and ResponseAddress is dnsdist itself, and (4) ingesting CLIENT_RESPONSE
only to avoid query/response duplicates.