Tailscale just partnered with Mullvad so this works out of the box for that setup: https://tailscale.com/blog/mullvad-integration/

Ah I literally saw that post here a few days ago! How could I forget about that? I might just switch over to Mullvad. Way cheaper, I can downgrade the Proton account I have (I’ll still use their email service until I have time and figure out how to self-host my own email) and I can use Mullvads encrypted DNS servers until I can configure DNS-over-HTTPS + Unbound on my PiHole.

Force tailscale to route all traffic through the DERP servers?

No no, sorry. I mean can I still have all my network traffic go through some VPN service (mine or a providers) while Tailscale is activated?

So if I’m torrenting something, I don’t have to turn off Tailscale on that device and switch on a VPN before I start the torrent process?

I’m going to guess either “no” or “yes, on paper, it’s possible.”

To a first approximation, Tailscale/Headscale don’t route and traffic.

Ah, well damn. Is there a way to achieve this while using Tailscale as well, or is that even recommended?

Are younreally expecting 10gb/s speeds over your encrypted links?

Eh, no. You have a good point there. I mean in a more perfect world that would be wonderful, but that’s not the case.

Oh boy, that’s certainly a novel issue! Well thanks for the answer and I’m glad I didn’t have to delve too deep in to trying to figure out the issue!