Hi,
Thank you for the detailed information.
You may refer to the following guide for the basic configuration required to forward Tailscale traffic to a WireGuard Client tunnel:
The guide shows how to allow forwarding from tailscale0 to wgclient1 and route Tailscale traffic through that WireGuard tunnel. However, the routing rules in the guide are mainly intended to send all Tailscale internet traffic through one WireGuard tunnel.
For your required setup, the general routing logic would be: traffic from Tailscale to Website 1 uses the first WireGuard interface, traffic to Website 2 uses the second WireGuard interface, and all other Tailscale traffic uses the default WAN route.
A similar community configuration using luci-app-pbr to route different domains through different VPN interfaces here:
With luci-app-pbr, policies can be created using the Tailscale address range as the source, the required domains as the destinations, and wgclient1, wgclient2, or WAN as the corresponding interfaces.
luci-app-pbr is an advanced community-based solution. Please note that domain-based routing may be affected if DNS requests bypass the router or if the website uses additional related domains. It may also conflict with the routing policies generated by the VPN Dashboard, so careful configuration and testing are required.
Thank you for your understanding.