IMO firewall rules impact very badly on this type of setup.
I’m interested too on a dual setup vpn for my clients and the ideal setup would be “use vpn for and do not use vpn for” at the same time.
I asked about this functionality to @alzhao but he answered that it’s to hard to implement…