Are you familiar with Tailscale? I think it reverts to tunneling over WireGuard over HTTPS in cases like this — I might be wrong, but I might block UDP on myself to test this out.
No, you're right! They have the best name, DERP relays lol. When tailscale can't find a node over UDP , it switches over to TCP and runs the encrypted traffic through the DERP relays.
Are you familiar with Tailscale? I think it reverts to tunneling over WireGuard over HTTPS in cases like this — I might be wrong, but I might block UDP on myself to test this out.
No, you're right! They have the best name, DERP relays lol. When tailscale can't find a node over UDP , it switches over to TCP and runs the encrypted traffic through the DERP relays.