This article begins with the principles behind Tailscale, moves on to setting up a custom DERP server to improve connection quality, and finally explains how to hijack Tailscale Exit Node traffic using iptables and forward it to ShellCrash to achieve flexible traffic routing and secure tunnelling.