On 27/02/2021 17:16, Frank Carmickle wrote: > Iordan, > > You say that it's possible to run a nested configuration on > Linux and Macos with just a single interface each. Have you > done a packet capture to prove that that is in fact what is > happening? That doesn't seem like how it would act given the > design goals. Nesting (Using one of Peer A's AllowedIPs as Peer B's Endpoint) does work within the same WireGuard interface, at least on Linux.