You could settings your dispVM sys-net like you want: dns, password, etc… Said thanks to @szz9pza
you can use dnscrypt too:
of @qubist with the nftables translation of @DVM :