use root_dns instead of hardcoded domain