@johnvoorhees and @viticci, did you make sure to set up John's Tailscale server as an Exit Node to make sure all of Federico's traffic was routed through NC? I've been setting this up since hearing you talk about it, and didn't realize that by default it won't route anything but "local" traffic through the Tailscale interface.
