Connection pool for TCP/DoT upstreams (up to 32 idle conns, 50s max idle, LIFO reuse) with stale connection retry. Reduces warm DoT query latency from ~400ms to ~50ms by reusing TLS connections through proxy. PreferIPv4 returns empty NODATA for AAAA queries to avoid dual-stack delays on IPv4-only proxy tunnels.