WireGuard AllowedIPs Helper
WireGuard has no DisallowedIPs. This tool subtracts the ranges you want to exclude from your allowed base and produces a minimal AllowedIPs line you can paste into a config.
Allowed IPs
One CIDR per line or comma-separated. Use 0.0.0.0/0 and/or ::/0 to route everything through the VPN.
Disallowed IPs
Group ranges by service (Twitch, local news, …). Uncheck a group to temporarily route it through the VPN again.
No groups yet. Add one to exclude IP ranges from the VPN route.