we got extra DNS server added automagically from cloud ADM. which broke DNS resolution for some resources on split VPN. It was fixed by removing the server. But a bit uncool.