As part of implementing Encrypted DNS in RHEL, NetworkManager (NM) needs to support DoT options provided by the Anaconda installer (pre-deployment)/Admins(post-installtion). NM should be able to process these options, interact with the dnsconfd plugin to configure resolvers, and provide new configurations for DoT, initially globally. The system should have the capability to enforce DoT for all connections.

Acceptance Criteria

• A detailed design page is created that outlines how NM will receive DNS/DoT options from the Anaconda installer and process them, the communication flow between NM and the dnsconfd plugin for configuring resolvers,
• The mechanism for configuring DoT settings globally within NM
• Configuration options available to users for requiring or configuring DoT via NM
• Documentation of new features, including UI/CLI for managing DoT settings
• Documentation requirements for the system administrator on how to enforce DoT