Comment by zackify
It makes me wonder why they do not allow you to have a failover that is in your own tailnet. Ex: let me use one of my servers as the control plane, if stuff goes down let that coordinate everything. Maybe its too close to self hosting for them to do it?
The server that acts as the control plane needs to have full access to the outside internet. You can’t do NAT hole-punching through STUN if you are yourself behind a NAT.
(There is Headscale though)