hm.. u're right.. even with local caching and timeout. ... it would still be a bad idea...
plus.. come to think about it.. it would be on l7 .. not the way I thinked about it... as every packet should be checked for domain hm... come to think about it.. it wouldn't even be possible.. didn't really think it through.