Policy Based Routing to route specific FQDN via Wireguard

General questions
, , , ,
6

So in case somebody else needs this…

set firewall group address-group IPV4GROUP address x.x.x.x
set firewall group address-group IPV4GROUP address x.x.x.x-x.x.x.x

set firewall group ipv6-address-group IPV6GROUP address h:h:h:h:h:h:h:h

set policy route TO-WIREGUARD rule 200 set table 200
set policy route TO-WIREGUARD rule 200 destination group address-group IPV4GROUP
set policy route TO-WIREGUARD interface eth1

set policy route6 TO-WIREGUARD rule 200 set table 200
set policy route6 TO-WIREGUARD rule 200 destination group address-group IPV6GROUP
set policy route6 TO-WIREGUARD interface eth1

set protocols static table 200 route 0.0.0.0/0 interface wg0
set protocols static table 200 route6 ::/0 interface wg0

set nat source rule 200 outbound-interface wg0
set nat source rule 200 translation address masquerade

Though it still requires to do some digging to find all relevant target ips… Maybe there’s something more clever that could be done using something like AdGuard Home?