I agree 1s sounds too aggressive.  Also, if we expect frequent queries then even a 1s timeout sucks.  In that case wouldn't it be better to run `nscd` or `dnsmasq` to cache responses?  Then the timeout would only happen once per `RR`.