oh, I have no doubt about this, tailscale seem to know what they're doing when it comes to networking, and the presentation on the website seems okay
It's just the one bit with the DNS records I can't wrap my head around - I guess it depends on what access you actually get via tailcat, have you had any chance to look into its access controls? *Are there* any kinds of access controls, or do you just get access as if you'd have a direct ethernet connection?