I don’t know if it’s on the icon, I believe you have to use the cli “tailscale status” to view your tailnet nodes connection types

Is it possible you misconfigured your tailnet and instead of using a direct connection to your local subnet router you were using an ethereal port via a DERP relay? You can read into it more on tailscales documentation, but essentially you need to leave UPD inbound port 41641 open to your subnet router inbound from WAN.

Tailscale, headscale, or something along those lines may help optimize the route but as others have said to resolve this is an actual fashion you’d need a cdn which requires significant geo-redundant hardware which comes at a pretty significant cost. That being said I think your friend has a good shot if you implement the former.

Fair enough. I just operate under the assumption deleted means deleted, I’d never toss Auth keys in userspace but I could absolutely see myself placing them temporarily in scripts I’d delete later.

Honestly this should be treated as a security vulnerability as well as a general bug, no?