Hi Bruno, Jeeze louise. Seems woefully complex. Inspired by your attempts here, I thought of another method involving network namespaces that you might consider instead. Voila: https://www.wireguard.io/netns/ Jason