Never used TailScale but I know it’s WireGuard based. Does it do keepalive by default? I was having issues with VPS (WireGuard peer with static IP) not being able to ping my network (router as WireGuard peer with dynamic IP and no port forwards). Sounds like this isn’t what’s going on here but just in case…