Hi,
May can try to deploy the wireguard and ADG in the pi-hole to solve.
This issue probably related to the DNS traffic of the VPN client in the GL router, here refer to:
It already in the develop plan, will improve this issue.