dnscrypt-proxy, it's also good for dns crypting