There's a userspace networking mode that pulls it out of the kernel?

https://tailscale.com/kb/1112/userspace-networking/