test for dns leaks post-suspend cycle. 90% fail this. btw that paloaltonetworks vpn article is actually decent if ur into the technical bits. no marketing bs, just packet-level stuff