every y out of x times a DNS recursor will fail to resolve .io .... ratio of y:x is based on complex srtt algorithms, and traffic levels. Not a big issue for popular hostnames like docker.io because most recursives would have the delegation in their cache.