try udp first on dnscrypt-proxy