I have a few Roku devices around. All my IoT devices are relegated to a segmented VLAN. Beyond that DNS is locked down. I block all of the DoH/DoT providers tha

I have a few Roku devices around. All my IoT devices are relegated to a segmented VLAN. Beyond that DNS is locked down. I block all of the DoH/DoT providers that are commonly used and then run specific DNS block lists for manufacturers. I also leverage NextDNS [0] as it easily allows me to build profiles per use case. I know they also have Roku specific DNS blocking (for telemetry, ads, etc). I had used PiHole in the past but like that I can use NextDNS everywhere all the time much more easily than I can with PiHole. It also provides overrides so I can still resolve internal addresses where I might want to. This helps when using things like Tailscale and not having to rely on another subdomain to think about. [0] https://www.nextdns.io https://www.nextdns.io