VPN Policy-Based Routing + Web UI -- Discussion

root@OpenWrt:~# /etc/init.d/vpn-policy-routing reload
Creating table 'wan/eth0.1/redacted' [✓]
Creating table 'WireGuard/10.10.199.1' [✓]
Creating table 'wwan/wlan0/10.10.20.1' [✓]
vpn-policy-routing 0.3.2-20 monitoring interfaces: wan WireGuard wwan [✓]
vpn-policy-routing 0.3.2-20 started with gateways:
wan/eth0.1/redacted
WireGuard/10.10.199.1
wwan/wlan0/10.10.20.1 [✓]
root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'
        option device 'lo'

config globals 'globals'
        option ula_prefix 'fde2:ba78:bab7::/48'
        option packet_steering '1'

config interface 'lan'
        option proto 'static'
        list ipaddr '172.28.165.1/24'
        option force_link '0'
        option ip6assign '64'
        option device 'br-lan'

config interface 'wan'
        option proto 'dhcp'
        option broadcast '1'
        option metric '10'
        option device 'eth0.1'

config interface 'wan6'
        option proto 'dhcpv6'
        option reqaddress 'try'
        option reqprefix '56'
        option peerdns '0'
        list dns '::1:5553'
        option device 'eth0.1'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '1 2 4 6t'
        option vid '2'

config switch_vlan
        option device 'switch0'
        option vlan '2'
        option ports '0t 5'
        option vid '1'

config switch_vlan
        option device 'switch0'
        option vlan '3'
        option ports '3 6t'
        option vid '3'

config interface 'VLAN'
        option proto 'static'
        list ipaddr '172.28.240.1/24'
        option ip6hint 'ff'
        option ip6assign '64'
        option force_link '0'
        option device 'eth1.3'

config interface 'WireGuard'
        option proto 'wireguard'
        option private_key 'redacted'
        option listen_port '36664'
        list addresses '10.10.199.1/24'

config wireguard_WireGuard
        option description 'laptop'
        option public_key 'redacted'
        list allowed_ips '10.10.199.2/32'
        option route_allowed_ips '1'
        option persistent_keepalive '25'

config interface 'surfshark'
        option proto 'none'
        option device 'stun0'

config wireguard_WireGuard
        option description 'redacted'
        option public_key 'redacted'
        list allowed_ips '10.10.199.3/32'
        option route_allowed_ips '1'

config wireguard_WireGuard
        option description 'redacted'
        option route_allowed_ips '1'
        option persistent_keepalive '25'
        list allowed_ips '10.10.199.4/32'
        option public_key 'redacted'

config wireguard_WireGuard
        option description 'redacted'
        option public_key 'redacted'
        list allowed_ips '10.10.199.8/32'
        option route_allowed_ips '1'

config wireguard_WireGuard
        option description 'redacted'
        option public_key 'redacted'
        option route_allowed_ips '1'
        option endpoint_host 'redacted'
        option endpoint_port '36664'
        list allowed_ips '10.10.199.6/24'

config interface 'HomeVPNnew'
        option proto 'none'
        option delegate '0'
        option device 'tun0'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth1.2'

config interface 'wwan'
        option proto 'dhcp'