This happens whenever I change the route that a router downstream of me connects to.
AppVMs connected to sys-firewall can reach the Internet (pinging IPs direct) but all DNS lookups fail.
AppVMs connected to proxy VMs connected to wireguard VPNs are fine for DNS.
I don’t have time today to do a full bug report but it has been an annoying recurring issue. Does anyone know? Thanks.