[Jnr]

Or go with Wireguard. It uses UDP, it has a silent protocol, no one from the outside can see it. (unless they can MITM you)

[ReptileMan]

headscale boils down to syntaxis sugar over wireguard.

To the headscale and tailscale teams members reading this - please don't kill me. You are making awesome things.