I have a 3-site network with S2S IPSec tunnels connecting each to each, as follows: I have Windows Server 2016 and 2022 running AD DS and DNS at the main office, but pfsense doling out DHCP addresses ...

I've always ended up needing to install something like openwrt on my routers. I'm not particularly interested in continuing to need to do that as this seems like an obvious feature people might need ...