This is not just caching BIND server.
It will handle matching.com domain, as this is what I need for set of real tests for goSPF (https://github.com/zaccone/goSPF).
It will listen on all available containers interfaces, but the address 172.17.0.2 is hardcoded for authoritative NS server for domain matching.com
The bind is configured so it will allow for recursive queries from 172/8 networks.
docker run -d zaccone:gospf-dns /usr/sbin/named -u bind -f