2 ms·

instead of relying on an upstream dns, why not just run a caching recursive resolver, unbound for example ? your queries are not leaked…