They have a really great in-depth blog post describing how they do it: https://tailscale.com/blog/how-nat-traversal-works