My router is Opnscence & pihole VMs running on a proxmox host with unbound/DHCP, VLAN segmentation and DHCP snooping on managed switches . YMMV

DNS resolution, split DHCP/DNS roles, and segmented services FTW.