I point "private DNS" to my VPS with pihole and stunnel, works quite well. Adguard as private DNS is also effective.