VR HMDs are really verbose at calling home. for video viewing local HereSphere + stashvr can still be used simply by allowing traffic between the LAN IPs (don't even need DNS) but to enable cloud streaming from service such as SLR while blocking everything else here's one approach:
- HMD is connecting to WiFi AP that gives it a static DHCP lease for 10.20.0.30
- opnsense firewall used as gateway router at 10.20.0.1
- pi.hole DNS running at 10.20.0.2