A validating, recursive, caching DNS resolver
https://nlnetlabs.nl/projects/unbound/about/

Unbound supports DNS-over-TLS and DNS-over-HTTPS which allows clients to
encrypt their communication. In addition, it supports various modern
standards that limit the amount of data exchanged with authoritative
servers. These standards do not only improve privacy but also help making
the DNS more robust. The most important are Query Name Minimisation, the
Aggressive Use of DNSSEC-Validated Cache and support for authority zones,
which can be used to load a copy of the root zone.