digraph G {
  bgcolor=transparent

// Must use the cluster_* prefix
  subgraph cluster_toxo {
    label="desktop @ home";
    color=lightgrey;
    subgraph cluster_netns {
      label="VPN NetNS";
      style=filled;
      color="mistyrose";
      wg1 [shape="rectangle"];
      firefox;
    }
    wg0 [shape="rectangle"];
    eth0 [shape="rectangle"];
    steam;
    pacman;
  }

  subgraph cluster_popho {
    label="server @ OVH";
    color=lightgrey;
    wg [shape="rectangle"];
    unbound;
    pf;
  }

  internet;
  wg -> unbound -> pf -> internet [label="domain" fontsize="9" color="darkorange4" fontcolor="darkorange4"];

  firefox -> wg1 -> wg [color="darkorange4" fontcolor="darkorange4"];
  firefox -> wg1 -> wg -> pf -> internet [label="low BW http(s)" fontsize="9" color="green" fontcolor="green"];
  wg0 -> wg [color="darkorange4"];
  pacman -> wg0 [color="darkorange4"];
  pacman -> eth0 -> internet [label="high BW https" fontsize="9" color="green" fontcolor="green"];
  steam -> wg0 [color="darkorange4"];
  steam -> eth0 -> internet [label="high BW udp/?" fontsize="9" color="darkblue" fontcolor="darkblue"];
}