phein4242B

Some script that parses blocklists into unbound local-data statements, combined with cron and unbound-control

You will be in for a surprise once you learn about tcpdump ;-) Welcome to internet hosting!

Even if you can get the appZTNA stuff to work (which I doubt), how is your infra going to absorb multi Tbit traffic without customer impact?

We have a bunch of these at the hackerspace. They run vanilla debian and connect to a terminal server using xdmcp. Works like a charm.

See a search engine and do some research. Maybe try out a bunch of different distros and find out for yourself

You expressed yourself just fine and my question is still valid. Do you have the capacity to handle multi Tbit traffic on the edge ips that you use to hide the backend ips? Because if all of those are flooded, not only will the backend app be unreachable, but all your customers will be unreachable as well.

SCO OpenServer

Can you explain what you mean with lightweight?

Syslog is what you are looking for.

OpenLDAP multi-master with a bunch of custom schemas.