Not sure if DoT is working...how do I check?

[not3baddad]

Setup is gluetun latest image running on Ubuntu 24.04 LTS. VPN is AirVPN and using Wireguard.

Running version latest built on 2024-11-15T17:50:21.531Z (commit fdd4991)

When starting up I am not seeing any entries in the logs suggesting that DNS over TLS is running.

Whilst trying to find potential similar issues, I noticed that some people's logs show the below:

INFO [dns over tls] downloading DNS over TLS cryptographic files

However, I don't see this entry in my logs:

Running version latest built on 2024-11-15T17:50:21.531Z (commit fdd4991)
📣 All control server routes will become private by default after the v3.41.0 release
🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
💻 Email? [email protected]
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-11-16T18:07:19Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
2024-11-16T18:07:19Z INFO [routing] local ethernet link found: eth0
2024-11-16T18:07:19Z INFO [routing] local ipnet found: 172.18.0.0/16
2024-11-16T18:07:19Z INFO [firewall] enabling...
2024-11-16T18:07:19Z INFO [firewall] enabled successfully
2024-11-16T18:07:19Z INFO [storage] creating /gluetun/servers.json with 20776 hardcoded servers
2024-11-16T18:07:20Z INFO Alpine version: 3.20.3
2024-11-16T18:07:20Z INFO OpenVPN 2.5 version: 2.5.10
2024-11-16T18:07:20Z INFO OpenVPN 2.6 version: 2.6.11
2024-11-16T18:07:20Z INFO IPtables version: v1.8.10
2024-11-16T18:07:20Z INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: airvpn
|   |   └── Server selection settings:
|   |       ├── VPN type: wireguard
|   |       ├── Countries: united kingdom
|   |       └── Wireguard selection settings:
|   └── Wireguard settings:
|       ├── Private key: *****************
|       ├── Pre-shared key: ***************
|       ├── Interface addresses:
|       |   └── **************
|       ├── Allowed IPs:
|       |   ├── 0.0.0.0/0
|       |   └── ::/0
|       └── Network interface: tun0
|           └── MTU: 1320
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Upstream resolvers:
|       |   └── cloudflare
|       ├── Caching: yes
|       ├── IPv6: no
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   ├── Enabled: yes
|   ├── VPN input ports:
|   |   └── 64317
|   └── Outbound subnets:
|       └── 192.168.1.0/24
├── Log settings:
|   └── Log level: info
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 2m0s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   ├── Logging: yes
|   └── Authentication file path: /gluetun/auth/config.toml
├── Storage settings:
|   └── Filepath: /gluetun/servers.json
├── OS Alpine settings:
|   ├── Process UID: 1000
|   ├── Process GID: 1000
|   └── Timezone: europe/london
├── Public IP settings:
|   ├── IP file path: /tmp/gluetun/ip
|   ├── Public IP data base API: ipinfo
|   └── Public IP data backup APIs:
|       ├── ifconfigco
|       ├── ip2location
|       └── cloudflare
├── Server data updater settings:
|   ├── Update period: 24h0m0s
|   ├── DNS address: 1.1.1.1:53
|   ├── Minimum ratio: 0.8
|   └── Providers to update: airvpn
└── Version settings:
    └── Enabled: yes
2024-11-16T18:07:20Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
2024-11-16T18:07:20Z INFO [routing] adding route for 0.0.0.0/0
2024-11-16T18:07:20Z INFO [firewall] setting allowed subnets...
2024-11-16T18:07:20Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
2024-11-16T18:07:20Z INFO [routing] adding route for 192.168.1.0/24
2024-11-16T18:07:20Z INFO [dns] using plaintext DNS at address 1.1.1.1
2024-11-16T18:07:20Z INFO [http server] http server listening on [::]:8000
2024-11-16T18:07:20Z INFO [healthcheck] listening on 127.0.0.1:9999
2024-11-16T18:07:20Z INFO [firewall] allowing VPN connection...
2024-11-16T18:07:20Z INFO [wireguard] Using available kernelspace implementation
2024-11-16T18:07:20Z INFO [wireguard] Connecting to ******************
2024-11-16T18:07:20Z INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
2024-11-16T18:07:20Z INFO [firewall] setting allowed input port ****** through interface tun0...
2024-11-16T18:07:20Z INFO [dns] downloading hostnames and IP block lists
2024-11-16T18:07:20Z INFO [healthcheck] healthy!
2024-11-16T18:07:21Z INFO [dns] DNS server listening on [::]:53
2024-11-16T18:07:21Z INFO [dns] ready
2024-11-16T18:07:22Z INFO [ip getter] Public IP address is *********************
2024-11-16T18:07:22Z INFO [vpn] You are running on the bleeding edge of latest!

How could I check that DoT is actually working or not?