External clients, yes. The use case for us is that we have some stuff in the network that we want to be accessible by internal employees on their external clients, e.g. our self hosted ERP system. Such that they can type in a website like "erp.internal" once connected via wireguard. Basically a road-warrior vpn setup. All other intra-cluster communication currently happens via k8s not using DNS - but eventually want to use netmaker to link a cluster in a different region and will want to use DNS for that.