This is interesting…App Connectors in Tailscale. It’s kinda like policy routing in pfSense where you can choose which Gateway to use for a specific domain…but through Tailscale.
Could be useful for locking down Saas portals and such, that you only want coming from (a) specific Public IP(s) only. Unifi, IT Glue, etc…?