You can see it on another slide from our upcoming Lima talk at Kubecon:

Here is the diagram again that shows how it works. There is no need to have any other nameserver configured inside the VM except for

192.168.5.3

. Adding more servers just makes the response you get less predictable; it does not make it more robust.