Wireguard is blocked at protocol level no matter which part you use. Tailsclale uses wireguard. Haven’t tried headscale yet.