Shameless plug - Knot DNS Resolver has out-of-order replies, query deduplication + pipelining, and TCP fastopen.
There's a PR open for DNS/TLS started at the OARC hackathon, but it wasn't finished. It would be terrific if somebody could pick that up, so we could have some real-world useable implementations for testing.

Marek

[1] https://gitlab.labs.nic.cz/knot/resolver/merge_requests/18

On 26 May 2016 at 00:24, Stephane Bortzmeyer <bortzmeyer@nic.fr> wrote:
On Thu, May 26, 2016 at 07:58:11AM +0200,
 Sara Dickinson <sara@sinodun.com> wrote
 a message of 58 lines which said:

> there still are a couple of features that are missing from Unbound
> for it to be fully performant/production ready.

Out-of-order replies, for instance.