Maybe I should explain, I would suggest to make a piece of fairly dumb software, which on one side receives IP lists, category and expiration. So IP X and IP Y are video streaming IPs and the DNS-entry said we should expire it after Z time. This would mean: add these IPs to this category IP-list and expire those IPs from that list. Then on the other side I would have it speak BGP to all the network equipment, which have 1 IP-sets per category. Le's call the dumb software the BGP-speaker. The network equipment uses the IP-lists to do firewalling, bandwidth-limiting, etc. This means the smart software is somewhere else, which might need restarts, etc. But the BGP-speaker part is fairly simple, doesn't need regular maintenance and talks to the network and you can probably make a cluster of it as well. The smart software watches the DNS traffic and classifies IPs based on DNS-name in DNS-replies and forwards that to the 'dumb' BGP-speaker with the DNS Time-To-Live. An other software can periodically poll certain DNS names and communicate that with the 'dumb' BGP-speaker. You could even make a piece of software which looks at what is going to expire and does a new DNS-query to refresh the IP-list for that DNS name. And you could also have some agreement with the video streaming providers on what DNS-names to poll but the advantage is the way to talk to the network is always the same.

Any time!