A reminder for me. If you've got WireGuard configured as a VPN client in Debian 11 Bullseye's Network Manager, and it does not route IPv6, check Allowed IPs contains ::/0. Read more