Install & configure unbound DNS server

Unbound is a full-fledge recursive DNS resolver. You should consider to not fetch from the root servers but forward your requests to another Server via DoT.  Bind unbound to 127.0.0.1 to avoid access from outside.

More information can be found in ArchWiki.