1
Is there a way I can make nextdns work while using vpn? I had the same setup on different distro, but when I try to install nextdns with command line: sh -c “$(curl -sL https://nextdns.io/install)” on cachyos there is launch error. Trying to edit resolved.conf doesn’t work as well since I lose connection completely. I saw that cachyos has dns edtior in cachyos, but I’m not sure what will be the right way to use it with vpn.
cscs 2
What error?
And what is that script supposed to do?
I started to read it but then realized it has some automation for Arch (and therefor Cachy) but its malformed;
Thats a partial-upgrade so an inherently broken command that can cause problems.
( Actually 2. Including one to install an alternative aur-helper whether you need or want it or not. )
So .. I suggest avoiding their silly script.
Just install nextdns package and go from there.
Also we have it in the repos so we do not even need the AUR or an AUR-helper.
sudo pacman -Syu nextdns
PS.
Its generally advisable to strictly use the DNS bundled with your VPN service. Using something else could pose extra problems with configuration and, even if set up well, could still result in leaks.
Unless you have a very good reason I would suggest not trying to apply some third party DNS to your VPN.
I used nextdns + vpn before and I think there were no dns leaks as far as I monitored and was aware, but I’m not sure if it’ll work with pacman package. What will it do, install cli tool for nextdns and configure everything in resolved config or somewhere else? Also, will it be better to use dns on router level and vpn in my system? @cscs
cscs 4
Its the same thing they were going to give you with that script except the right way.
I have no idea how it works because I do not use nextdns.
It seems to give you /usr/bin/nextdns executable and nothing else.
Again I have no idea how that works.
As for checking yourself and leaks and such you might reference a few things but an all-around/first check might be something like
It even has a magnet so you can check if torrent is leaking specifically.
I always like to configure my router to have good defaults.
If you do that then you technically do not have to configure your OS/device DNS .. but you may wish to do so for mobile devices that may connect to other networks.
So in my case for things like laptops they end up being configured there again.
It can also depend on what you have access to - maybe the router is shared in a building. Or maybe the firmware is trash so you cannot adjust things. And so on.
PS.
I do have a DNS speed check tool if that may be handy for you. 
Thanks a lot for detailed answer. I’ll try the package, just to see, but will configure my router instead after an upgrade.