How can I route all DNS requests through my VPS to prevent DNS leaks? (欢迎中文）

[TommyYOyoyo]

I've established a connection between my VPS (GCP VM) and my computer using xray-reality-xtls-rprx-vision protocol, but I noticed in the past days (using ipleak.net) that my DNS requests are being leaked. As a result, all my ISPs were exposed.

How can I make sure that all my DNS requests are properly routed through my VPS?

Information on my setup:

VPS: Google Cloud Platform Compute Engine (Tokyo) - Debian 12
Xray GUI: V2RayXS
OS: MacOS
Config generated with reality-ezpz

My current config.json:

{
  "routing" : {
    "name" : "all_to_main",
    "domainStrategy" : "AsIs",
    "rules" : [
      {
        "type" : "field",
        "outboundTag" : "RealityEZPZ",
        "port" : "0-65535"
      }
    ]
  },
  "inbounds" : [
    {
      "listen" : "127.0.0.1",
      "protocol" : "socks",
      "settings" : {
        "ip" : "127.0.0.1",
        "auth" : "noauth",
        "udp" : false
      },
      "tag" : "socksinbound",
      "port" : 1081
    },
    {
      "listen" : "127.0.0.1",
      "protocol" : "http",
      "settings" : {
        "timeout" : 0
      },
      "tag" : "httpinbound",
      "port" : 8001
    }
  ],
  "dns" : {
    "servers" : [
      "1.1.1.1",
      "1.0.0.1",
      "8.8.8.8",
      "8.8.4.4"
    ]
  },
  "log" : {
    "error" : "\/var\/folders\/51\/1pgrz5295dg1b15vht_4rft00000gn\/T\/cenmrev.v2rayx.log\/error.log",
    "loglevel" : "warning",
    "access" : "\/var\/folders\/51\/1pgrz5295dg1b15vht_4rft00000gn\/T\/cenmrev.v2rayx.log\/access.log"
  },
  "outbounds" : [
    {
      "sendThrough" : "0.0.0.0",
      "mux" : {
        "enabled" : false,
        "concurrency" : 8
      },
      "protocol" : "vless",
      "settings" : {
        "vnext" : [
          {
            "address" : "<MY VM'S IP>",
            "users" : [
              {
                "flow" : "xtls-rprx-vision",
                "id" : "de4f3554-55ef-4541-b9e5-dff6f681fc26",
                "alterId" : 64,
                "security" : "none",
                "level" : 0,
                "encryption" : "none"
              }
            ],
            "port" : 443
          }
        ]
      },
      "tag" : "RealityEZPZ",
      "streamSettings" : {
        "realitySettings" : {
          "serverName" : "www.google.com",
          "publicKey" : "KB8W-E1Db4xd9vbc2QeQCnjYLRT56Kr2BWHULau-Rg8",
          "shortId" : "17ac78d51fdbd893",
          "show" : false,
          "spiderX" : "",
          "fingerprint" : "chrome"
        },
        "network" : "tcp",
        "wsSettings" : {
          "path" : "",
          "headers" : {

          }
        },
        "quicSettings" : {
          "key" : "",
          "header" : {
            "type" : "none"
          },
          "security" : "none"
        },
        "tlsSettings" : {
          "allowInsecure" : false,
          "alpn" : [
            "http\/1.1"
          ],
          "serverName" : "www.google.com",
          "allowInsecureCiphers" : false
        },
        "xtlsSettings" : {
          "serverName" : "www.google.com",
          "allowInsecure" : false,
          "alpn" : [
            "http\/1.1"
          ]
        },
        "httpSettings" : {
          "path" : ""
        },
        "kcpSettings" : {
          "header" : {
            "type" : "none"
          },
          "mtu" : 1350,
          "congestion" : false,
          "tti" : 20,
          "uplinkCapacity" : 5,
          "writeBufferSize" : 1,
          "readBufferSize" : 1,
          "seed" : "",
          "downlinkCapacity" : 20
        },
        "tcpSettings" : {
          "header" : {
            "type" : "none"
          }
        },
        "security" : "reality",
        "grpcSettings" : {
          "serviceName" : "",
          "multiMode" : false
        }
      }
    }
  ]
}

[TommyYOyoyo]

It turned out that only FireFox is leaking my DNS and the issues were its enabled DNS-over-HTTP setting and uBlock Origin "uncloak canonical names" option. After turning both off my ISPs seem to become only Google and Cloudflare, which I set on my V2RayXS configurations.

To further ensure that every application on my laptop respects the DNS settings, I used dnsmasq to forward every DNS request through it to my desired DNS (Google/Cloudflare).