Your problem as described in your previous post is not a pfSense issue. It is something on your web server setup. Your domain.net I assume resolves to a single IP. The URLs have the domain name in them, but then also include a web path that only the web server (or a web proxy) can read and understand. DNS and pfSense stop at the end of net in your example. The trailing slash and everything after that is the responsibility of the web host the URL is directed towards.
IPv6 gateway shows connected and online but there is no DNS for internet
If you setup IPv6 correctly and there is no DNS, maybe you're suffering as I am discovering ISP gave static IPv6 that doesn't allow LAN to communicate with upstream DVCPv6 server. Please call your ISP.
In my case, I was using Firefox and as always selected open downloaded files, but it still would not uncompressed in Ventura...so I grabbed my old MacBook pro 2011...solved that easily.
Check the other logs at that time. You can see in both those cases dpinger was restarted by something shortly after WAN was marked down due to packet loss.
I'm not sure how much help a cloud based concentrator would provide here unless you also moved other resources to the cloud and the HQ becomes just another site. That way if the HQ connection goes down the other sites remain up.
Sure you can authenticate APs across one route whilst routing traffic from wifi clients over a different route.
Currently there is no official central management for pfSense so much of this would be manual setup. Though you can have each site pull alias lists from something central and use those is rules for common requirements.
@Gertjan okay, I will try to re run the test with multicore. Otherwise I am considering switching to a official netgate device and keep the protectli as a backup if the netgate device fails someday.