A few things:
- For VPN recommendations, take a look at this topic where those are discussed in detail.
- The most common way of doing system-wide adblocking is via a DNS blacklist. There are a few ways to achieve this:
- The easiest way is to just change your DNS servers to public adblocking DNS servers. The downside of this option is the lack of control.
- Implement your own DNS blocking using a list
- Use something like pihole
- In my opinion, DNS adblocking should supplement your browser adblocking, not replace it. Browser adblocking is more effective because the rules can match the entire URL instead of just the domain portion. By using both, you let your browser do the heavy lifting and the DNS blocking protects the rest of your traffic.