The dnscrypt-proxy is a local #DNS proxy with a surprisingly deep feature set ( https://github.com/DNSCrypt/dnscrypt-proxy ). It supports #EncryptedDNS via #DNSCrypt or #DoH and it can also add extra privacy with #ODoH and anonymized relays. You can apply policy-based resolver selection requiring #DNSSEC, #IPv6, or privacy properties like #NoLog and #NoFilter.