Ok other than forgetting how much of a dick DNS is this all seems to work
@mjg59 Someone decided it was a good idea to override the TTL to 0 to force everything to be uncachable. This of course breaks a lot of things.