Turns out if you change your network’s DNS configuration but forget to open the firewall to allow that from VLANs other than the one you typically use over the next several hours devices will slowly start falling off the network in cryptic ways.
And not one of them will say “hey, DNS isn’t working”, they’ll just give you a useless message saying they couldn’t connect to your wifi network, sending you on a wild goose chase.