I use CoreDNS as a stub resolver to do DNS over TLS. It works great. https://coredns.io/