And my solution is primarily SOCKS5 reverse, on top of tailscale (moving away from ts, although no complaints) with lots of routing in the middle.