Another potential avenue for gatewaying is to use an in-mesh gateway as a proxy for a vpn connection itself (instead of terminating the vpn connection on the gateway and doing NAT). This would be pretty separate from autoygg and would likely be implemented as a separate "internet gateway" config page that would be essentially wireguard/openvpn gui.
iptables -t DNAT -p udp -m udp --dport 1194 --to-destination 2001-2008 --random
Another potential avenue for gatewaying is to use an in-mesh gateway as a proxy for a vpn connection itself (instead of terminating the vpn connection on the gateway and doing NAT). This would be pretty separate from autoygg and would likely be implemented as a separate "internet gateway" config page that would be essentially wireguard/openvpn gui.
iptables -t DNAT -p udp -m udp --dport 1194 --to-destination 2001-2008 --random