It's really odd. Just when I think I've got everything sorted, something seems to break. The windows clients always seem to be implicated. I now have one Linux cloud VM that won't talk to either of two Windows clients, and they won't ping that VM either. They are talking to all the other Linux nodes though quite happily. Until they get sulky and just stop. Still handshaking intermittently, but often showing several minutes since the last attempt in wg show. I have to uninstall and reinstall those clients, get everything settled, then they go down again. I definitely readded all the firewall rules on Windows clients again, but they didn't like the latest Linux node and I can't work out why. Maybe Defender, or perhaps an issue with the service bring woken and not waking wireguard completely?