My response/resolve times between my dnssec cloudflare or ams dnssec.....is between 4-5ms!
Like I wrote earlier, DSA works if you follow a tutorial with ip link set dev.....I have a separate vlan for my own lan(I share it with my upstairs neighbor).....it works without a hitch! We have a fiber connection with a vlan setting and a separate iptv vlan and a really short dhcp lease time....the router never missed a beat!
So follow the link for DSA,vlan settings
Dsa solution forum openwrt