I selfhost tailscale with headscale, I used a helm chart in a k8s cluster, works great.

I ran into a corporate network recently that blocked the Tailscale DERP servers.