Indeed, unbound is a very good choice. In the past, for many decades, dnscache was an excellent recursive resolver and cache. Unfortunately, it has become obso

Indeed, unbound is a very good choice. In the past, for many decades, dnscache was an excellent recursive resolver and cache. Unfortunately, it has become obsolete because nowadays many DNS queries return replies so big that they must be obtained over TCP, so an UDP-only tool is no longer good enough.