Are DNS queries to a public DNS encrypted when using a VPN?

VPN
1

My VPN is leaking my DNS queries. To solve this, I have switched in my network adapter settings from my ISP’s DNS to Cloudflare, which seems more private. DNS queries are typically not encrypted; however, since my internet traffic is supposed to be routed through my VPN, are they actually encrypted by the VPN? Or is the DNS query sent directly and outside the VPN tunnel? Basically this matters because it would be the difference between my ISP being able to snoop on my DNS queries to Cloudflare or not.

Note: I cannot turn on DNS over HTTPS in my browser because it fails with the VPN turned on.

2

DNS should go over the the VPN and then it is as normal. Are you routing all traffic via the VPN?

3

Is your vpn on a machine or installed into your router?

4

Not really… I use my VPN’s Firefox extension. Would that mean that the DNS queries do not go through the tunnel?

I can use my VPN to encrypt all traffic and actually that stops the leaking of DNS queries, but it doesn’t have site exceptions, so many websites break… That’s why I use the extension.