> it was always relayed via a Tailscale DERP node Fly.io or not, this was an issue I always ran into with Tailscale. They talk a big game about NAT punching,

> it was always relayed via a Tailscale DERP node Fly.io or not, this was an issue I always ran into with Tailscale. They talk a big game about NAT punching, and using various UDP shenanigans to get around P2P connection formation issues, but at the end of the day, most of my connections were via DERP, even with fairly trivial firewall configurations.