@drscriptt @Toble_Miner In the end, I did actually squeeze a working iptables binary in there, even if it pretty much only does the bare basics + CONNTRACK and NAT extensions, a wg binary plus included kernel module for Wireguard tunnels and bunch of BusyBox applets, mostly for networking like udhcpc/d, ip commands and telnet, currently with still ~20k free! I'd call it a successful experiment :neocat_blep: