I’m using a Surf SOHO MK3 in a home with a full-time work-from-home parent, a part-time work-from-home parent, a number of children, and visiting friends and family. There are different LANs with different levels of access for for parents, children, guests, and IoT devices. I am also using the DNS proxy to assign names in the home.arpa domain to local devices.
I like that the DNS proxy can resolve with DNS over HTTPS to increase privacy. I have configured it to use a filtered DNS service for the good of my children and their friends.
A side effect of this is that it blocks certain things that I need to do (e.g., to read forum postings about how various kinds of filtering might by bypassed). I can work around this by configuring my own computer to use another encrypted DNS service directly. To configure a blanket exception is simple, but to keep home.arpa lookups working is complicated enough that I thought, “there must be a better way.”
If I could configure the DNS proxy to resolve with different DoH servers for the parent and child/guest LANs, I believe it would simplify this task on the whole.