diff --git a/etc/resolv.conf b/etc/resolv.conf
index 1aa37ab6..879ab4cf 100644
--- a/etc/resolv.conf
+++ b/etc/resolv.conf
@@ -17,9 +17,11 @@ nameserver 127.0.0.53
 
 # rotate = randomly use all
 # edns0 = extended DNS
-# trust-ad DNSSEC answers
+# trust-ad = trust DNSSEC authenticated data
+# timeout:1 = nameserver timeout 1 s (default 5, max 30), then next
+# attempts:5 = try the nameserver 5 times, then next (default 2, max 5)
 #options rotate edns0 trust-ad
-options edns0 trust-ad
+options edns0 trust-ad timeout:1 attempts:5
 
 # no sending local domain to upstream whenever NXDOMAIN happens
 search .