DNS with WireGuard on MacOS is some kind of magic I haven’t fully figure out yet. I have noticed that I need to start a new terminal window after I connect to get *.internal
to resolve.
The dig
tool might be doing something special. You should be able to ping
or ping -6
an app, which might work if dig isn’t.