Trying to get the equivalent on Tunnel VPN working on OPNsense without having a DNS leak took forever.
I’ll have to give Kea a try sometime.
Happily mines virtualized so I’ll just take a snapshot before changing.
I have something like 100 DHCP reservations though so I may write a little app to move them to Kea from ISC rather than move them all manually.