Uplift patch for 5741 (dns leak protection)

This should probably be under the --enable-proxy-bypass-protection flag.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information