Run your own recursive server and instrument the crap out of it: https://github.com/m3047/rear_view_rpz https://github.com/m3047/rear_view_rpz You can't get loc

Run your own recursive server and instrument the crap out of it: https://github.com/m3047/rear_view_rpz https://github.com/m3047/rear_view_rpz You can't get local knowledge from anywhere else. The latest BIND has DoT (DNS over TLS) out of the box, or you can put nginx in front of any decent DNS server to terminate TLS just like you do with a web server (this is fundamentally TCP not UDP however).