Comment by ohgr

Yeah it's not perfect on iOS but better than maintaining your own stack. Basically it creates a VPN to localhost then proxies the DNS and traffic over that. It only modifies the DNS using a blocklist and passes your normal traffic straight through.

Works well. Even the crappiest nasty sites won't get through it.