@Shamar try playing with dnsdist. You would need to handle /etc/resolv.conf manually. Why not just DoT?
Follow
Because I wrote a fast, easy to deploy, cgi-bin in C to do DoH, and saw that it is an incredibly good way to circumvent surveillance (that mainstream DoH providers feed) and censorship (that these day run rampant in Italy, thank to the #PiracyShield).
With a single binary that can be hosted practically anywhere, you can merge your DNS traffic with the one of the hosting provider and have a professional security around the service.
And being a small binary, it's very fast.
