[moritzruth]

> Tailscale builds on top of WireGuard by adding automatic mesh configuration, single sign-on (SSO), NAT traversal, TCP transport, and centralized Access Control Lists (ACLs).

— https://tailscale.com/kb/1035/wireguard