Exit node is a VPS (Racknerd)

eta: it’s quite the deal tbh

Tailscale uses wireshark, which is peer-to-peer. Their “free” plan allows you to set up a network using their “coordination” server, which simplifies administration of your tailnet.

You control dns, exit nodes, etc, so tailscale isn’t involved with the vpn itself, hence no speed limits.

You ultimately determine what tailscale collects as far as client logging.

If you block client logging, Tailscale may not be able to provide technical support.

I imagine the docker image serves to eliminate tailscale from the equation.

ETA: there are quite a few ad-blocking dns servers.

I currently use nextdns.io

There are “public” pihole servers: use their dns, or the many other ad-blocking servers out there as the dns for your VPN.

Tbh, I’ve stopped the selfhosted vpn route and use tailscale (which can be selfhosted/has a docker image). It doesn’t get simpler.