iCloud Private Relay not allowed on this network

I suspect that this thread is related:

https://forum.openwrt.org/t/how-to-remove-domains-from-dns-query-redirection/

Where is query redirection configured?