diff --git a/hosts/xlab-gateway/networking.nix b/hosts/xlab-gateway/networking.nix
index 6d50cae..a82c4bf 100644
--- a/hosts/xlab-gateway/networking.nix
+++ b/hosts/xlab-gateway/networking.nix
@@ -240,6 +240,10 @@
         # 告诉策略路由表：如果是去往管理网段，不要走隧道，跳回 main 表处理
         { Destination = "192.168.1.0/24"; Type = "throw"; Table = 1002; }
         # ==================================
+        # v6 CERNET throw routes → CERNET/Tsinghua v6 (incl. tuna 2402:f000::/32) direct via wan99.0, not the wg tunnel
+        { Destination = "2402:f000::/32"; Type = "throw"; Table = 1002; }
+        { Destination = "2001:da8::/32"; Type = "throw"; Table = 1002; }
+        { Destination = "2001:250::/35"; Type = "throw"; Table = 1002; }
       ];
       routingPolicyRules = [
         # LAN IPv4 → suppress default route in main table, fall through to freedom-wgnet