为了防止各种DNS污染，可以安装DoH客户端实现纯净解析

安装

wget https://bin.equinox.io/c/VdrWdbjqyF/cloudflared-stable-linux-amd64.rpm
yum install ./cloudflared-stable-linux-amd64.rpm -y
cloudflared --version

配置文件

mkdir -p /usr/local/etc/cloudflared

cat << EOF > /usr/local/etc/cloudflared/config.yml
proxy-dns: true
proxy-dns-upstream:
 - https://1.1.1.1/dns-query
 - https://1.0.0.1/dns-query
EOF

创建服务并开启

cloudflared service install
systemctl start cloudflared
systemctl status cloudflared

修改本机dns

vim /etc/resolv.conf
改为
nameserver 127.0.0.1

测试

yum install -y bind-utils
dig @127.0.0.1 -p 53 google.com

nslookup www.google.com 127.0.0.1