IPShield is a DNS server that checks IP addresses against a blocklist and datacenter ranges. It provides a DNS query service to determine if an IP address is safe, flagged, or belongs to a datacenter.
"network manager can be configured using nmtui in cli."
GUI doesn't have the "ignore automatically obtained DNS parameters", only 'Ignore automatically obtained routes", so you have to use nmtui
The SVCB and HTTPS resource records allow you to speed up your time-to-first-packet (by basically stuffing the Alt-Svc HTTP header / ALPN TLS extension into the DNS); let you do redirection on the zone apex without using CNAMEs; allow for simple DNS load distribution and failover; obviate HSTS and the cumbersome preloading process; and enable stronger privacy protections via Encrypted Client Hello aka ECH