I know the wireguard team was experimenting with wireguard dhcp, but it looks abandoned. Something something massive security problem when filtering traffic