Check what derp server map is and what is your client dns ip is after connecting to tailscale.
Headscale ships with an embedded derp server. If you are worried about public ones, use your own.
Please Login to reply.
And don’t forget to check if tailscale does something creative to your firewall rules. True open society style.