diff --git a/internal/app/machined/pkg/controllers/k8s/templates/core-dns-template.yaml b/internal/app/machined/pkg/controllers/k8s/templates/core-dns-template.yaml
index 6daa01d25a..bfa2fcb499 100644
--- a/internal/app/machined/pkg/controllers/k8s/templates/core-dns-template.yaml
+++ b/internal/app/machined/pkg/controllers/k8s/templates/core-dns-template.yaml
@@ -65,9 +65,17 @@ data:
         kubernetes {{ .ClusterDomain }} in-addr.arpa ip6.arpa {
             pods insecure
             fallthrough in-addr.arpa ip6.arpa
+            ttl 30
+        }
+        forward . /etc/resolv.conf {
+           max_concurrent 1000
         }
-        forward . /etc/resolv.conf
         cache 30
+        {{- if .ClusterDomain }} {
+           disable success {{ .ClusterDomain }}
+           disable denial {{ .ClusterDomain }}
+        }
+        {{- end }}
         loop
         reload
         loadbalance