I want to make a feature request.
We need to be able to activate both VPN policies based on the target domain and VPN policy based on the client device simultaneously.
The current setup is too limited.
For example, I want to route all the traffic from a game console directly without VPN due to latency concerns (it's impossible to set it up via VPN policies based on the target domain only because peer-to-peer connections in multiplayer games use IP addresses).
While deciding on a per-domain basis for other devices.
I think, my use case is fairly widespread, and the solution will benefit many users.