On 15.11.20 19:42, Yves Goergen wrote: > This reality includes host names like "pc1" and "pc2" in one LAN and > "pc3" and "pc4" in the other LAN. So you need a DNS proxy that knows about stripping .one.lan and .two.lan suffixes from your host names before forwarding the request to the requisite DNS server. Or one that asks both and merges the replies. None of this is in any way difficult to code, or indeed specific to Wireguard. Also, why would you want to reconfigure your DNS proxy whenever the tunnel state changes? The proxy either gets an answer or it doesn't (or it gets a ICMP Unreachable back). If not, the tunnel is down, either because the other end is temporarily unreachable or because you tore down the tunnel. No reconfiguration required, simply react to timeouts and ICMPs / EHOSTUNREACH (or whatever the Windows equivalent is) as appropriate. -- -- Matthias Urlichs