Within a FOB WiFi, all outgoing traffic is routed through Wireguard tunnel to the main network. All you need are two Routerboards with RouterOS 7 and some time on your hands.