In addition, you can also use Cisco or Quad9 DNS, with DoH / DoTLS / IPSEC and whatnot, just install it via SSH, but don’t wonder if your performance gets slightly worse.