You could setup tailscale on your router (eg pfSense which can be virtualized) and route all the tailscale traffic through a privacy VPN client on the same router.

Replies (2)