dig @127.0.0.1 -p 5353 yandex.com +nodnssec +timeout=10 -t A +notcp
; <<>> DiG 9.18.1-1ubuntu1.3-Ubuntu <<>> @127.0.0.1 -p 5353 yandex.com +nodnssec +timeout=10 -t A +notcp
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17889
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;yandex.com.			IN	A
;; ANSWER SECTION:
yandex.com.		1200	IN	A	77.88.55.80
yandex.com.		1200	IN	A	5.255.255.88
yandex.com.		1200	IN	A	5.255.255.80
yandex.com.		1200	IN	A	77.88.55.77
;; Query time: 216 msec
;; SERVER: 127.0.0.1#5353(127.0.0.1) (UDP)
;; WHEN: Thu Sep 21 12:41:27 MSK 2023
;; MSG SIZE  rcvd: 103

dig @127.0.0.1 -p 5353 yandex.com +nodnssec +timeout=10 -t A +notcp
; <<>> DiG 9.18.1-1ubuntu1.3-Ubuntu <<>> @127.0.0.1 -p 5353 yandex.com +nodnssec +timeout=10 -t A +notcp
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

ProviderName    2.dnscrypt-cert.browser.yandex.net
ProviderKey     D384:C071:C9F7:4662:AF2A:CCD5:7B5D:CC97:14D4:07B6:AD36:01E1:AEDC:06D5:6D49:6327
ResolverAddress 127.0.0.1:15354
Daemonize no
LocalAddress 127.0.0.1:5353
LocalCache off
EphemeralKeys off
LogLevel 7
BlockIPv6 no

Version 1.18.0
Configure line: --disable-static --prefix=/var/empty/unbound-1.18.0 --bindir=/var/empty/tmp/out/bin --sbindir=/var/empty/tmp/out/sbin --includedir=/var/empty/tmp/out/include --oldincludedir=/var/empty/tmp/out/include --mandir=/var/empty/tmp/out/share/man --infodir=/var/empty/tmp/out/share/info --docdir=/var/empty/tmp/out/share/doc/unbound --libdir=/var/empty/tmp/out/lib --libexecdir=/var/empty/tmp/out/libexec --localedir=/var/empty/tmp/out/share/locale --disable-rpath --disable-dnstap --enable-dnscrypt --enable-subnet --enable-systemd --libdir=/usr/lib --prefix= --with-libevent=/place/sandbox-data/tasks/3/9/1924600693/__FUSE/mount_path_ffc78d12-6077-4afa-8e09-3215fe69b6c3/contrib/libs/libevent --with-pidfile=/run/unbound.pid --with-rootkey-file=/var/lib/unbound/root.key --with-username= --disable-systemd
Linked libs: libevent 2.1.12-stable (it uses epoll), OpenSSL 3.0.2 15 Mar 2022
Linked modules: dns64 subnetcache respip validator iterator
DNSCrypt feature available

server:
        root-hints: "/dnsdata/named.root"
        directory: "/"
        username: ""
        chroot: ""
        interface: 127.0.0.1@10453
        interface: ::1@10453
        interface: 127.0.0.1@15354
        ip-freebind: "yes"
        do-daemonize: "no"
        num-threads: 1
        access-control: 0.0.0.0/0 allow
        access-control: ::0/0 allow
        statistics-interval: 60
        statistics-cumulative: "yes"
        extended-statistics: "yes"
        logfile: /logs/unbound/unbound_crypt.log
        verbosity: 5
        val-log-level: 2
        log-time-ascii: yes
        log-queries: yes
        trust-anchor-file: "/unbound_secrets/root.key"
        val-permissive-mode: "yes"
        module-config: "iterator"
remote-control:
        control-enable: yes
        control-interface: ::1
        control-port: 22204
        server-key-file: "/unbound_secrets/unbound_server.key"
        server-cert-file: "/unbound_secrets/unbound_server.pem"
        control-key-file: "/unbound_secrets/unbound_control.key"
        control-cert-file: "/unbound_secrets/unbound_control.pem"
dnscrypt:
        dnscrypt-enable: yes
        dnscrypt-port: 15354
        dnscrypt-provider: 2.dnscrypt-cert.browser.yandex.net.
        dnscrypt-secret-key: /dnscrypt/2.key
        dnscrypt-provider-cert: /dnscrypt/2.cert
        dnscrypt-provider-cert-rotated: /dnscrypt/1.cert

lsb_release -r
Release:	22.04
uname -rn
5.4.210-39