Further, and to their credit theres a lot of great tech in there. Just the other day I stumbled on DERP [1] their wireguard-over-tcp (over their node network)

Further, and to their credit theres a lot of great tech in there. Just the other day I stumbled on DERP [1] their wireguard-over-tcp (over their node network) implementation which they fall back to if NAT traversal fails. While sure, this is partly ipv4 problem, it recently helped me connect with friends behind government firewalls, presumably because the packets aren't recognized yet. But that sort of automated connectivity during nat traversal failure through a global network of edges isn't something you can easily setup yourself (if you care). [1] github.com/tailscale/tailscale/tree/main/derp