A dnscrypt-proxy or similar tutorial is probably a good starting point