A portable DNS resolver in a single Rust binary with ad blocking, local service domains, and encrypted private queries.