@straight-lock-3524 yes,egress gateway with 0.0.0.0/0 and I configure external clients with AllowedIPs 0.0.0.0/0 but for normal nodes at the time when I tested 0.0.0.0/0 wasn't added to AllowedIPs so I only have a single node that is ingress and egress.