Looks like it's qubes related.
Looks like qubes write a new /etc/resolve.conf and so removes the symbolic link after vm start.
sudo ln -sfvn /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
Within Fedora it's working fine. Only debian 11 has this issue.
The qubes issue on Debian 11 can be fixed by adding the lines below to the rc.local file. sudo vi /rw/config/rc.local
# change resolve.conf to enable openziti DNS
# https://openziti.discourse.group/t/dns-issue-with-tunnelers-on-debian-and-windows/892/18
ln -sfvn /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
systemctl start systemd-resolved.service