that's not even relevant since couldn't you just run adblocking dns script as cronjob with list of ad domains like here? https://raw.githubusercontent.com/StevenBlack/hosts/master/h...

how china blocks that? ublock sucks anyway if you're using 127.0.0.1:53 with unbound/dnscrypt or something