I run dnsmasq backed by dnscrypt-proxy, haven't had issues.