Hi, I'm Jacek, one of Defguard's core developers. Defguard is about more than just VPN, though it does play an important role. Think of it as identity service, building features on top of identity - VPN being just one of them. Other features include: OpenID Connect provider, MFA (TOTP, WebAuthn/FIDO2, Web3), YubiKey provisioning, webhooks. As Robert mentioned, mesh networks support is planned.

We already have a PoC/code working of WireGuard peer discovery/connections without a central VPN gateway. Soon we will publish that module, and you will be able to deploy *your own private tailscale*.