DoQ
DNS over QUIC: encrypts DNS over the QUIC transport, combining the privacy of DoT with the lower latency of QUIC.
DoQ (DNS over QUIC) carries DNS messages over QUIC, the same transport used by HTTP/3. Compared to DoT (which runs over TCP+TLS), DoQ avoids head-of-line blocking, recovers from packet loss faster, and uses a 1-RTT or 0-RTT handshake. The result is encrypted DNS that often beats even plain UDP DNS on a lossy network. Adoption is led by AdGuard DNS, NextDNS, and dnscrypt-proxy. DoQ uses dedicated port 853 for the QUIC variant (distinct from DoT's TCP 853), so firewalls treat it as its own protocol.