I've tried most of the popular ones on Linux, these are the ones Ive got working all right with little enough hassle to recommend checking out: unbound knot-r

I've tried most of the popular ones on Linux, these are the ones Ive got working all right with little enough hassle to recommend checking out: unbound knot-resolver Technitium Yadifa (I find BIND tiresome and would only recommend core-dns if you know why you want it) unbound would be my go-to. --- General advice: Keep your resolver(s) for public DNS dedicated and as isolated as reasonable. Don't point your clients directly to it or configure any custom zones on it. Instead have your existing (I assume, otherwise spin up dnsmasq) DNS servers forward and cache all your actual lookups.